Oct 2 19:24:47.776224 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:24:47.776249 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:24:47.776261 kernel: BIOS-provided physical RAM map: Oct 2 19:24:47.776269 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:24:47.776276 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:24:47.776284 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:24:47.776294 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdcfff] usable Oct 2 19:24:47.776302 kernel: BIOS-e820: [mem 0x000000009cfdd000-0x000000009cffffff] reserved Oct 2 19:24:47.776311 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Oct 2 19:24:47.776319 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:24:47.776327 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Oct 2 19:24:47.776335 kernel: NX (Execute Disable) protection: active Oct 2 19:24:47.776343 kernel: SMBIOS 2.8 present. Oct 2 19:24:47.776352 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Oct 2 19:24:47.776363 kernel: Hypervisor detected: KVM Oct 2 19:24:47.776372 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:24:47.776380 kernel: kvm-clock: cpu 0, msr 37f8a001, primary cpu clock Oct 2 19:24:47.776389 kernel: kvm-clock: using sched offset of 2211640308 cycles Oct 2 19:24:47.776398 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:24:47.776407 kernel: tsc: Detected 2794.748 MHz processor Oct 2 19:24:47.776416 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:24:47.776426 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:24:47.776435 kernel: last_pfn = 0x9cfdd max_arch_pfn = 0x400000000 Oct 2 19:24:47.776445 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:24:47.776454 kernel: Using GB pages for direct mapping Oct 2 19:24:47.776463 kernel: ACPI: Early table checksum verification disabled Oct 2 19:24:47.776472 kernel: ACPI: RSDP 0x00000000000F59C0 000014 (v00 BOCHS ) Oct 2 19:24:47.776481 kernel: ACPI: RSDT 0x000000009CFE1BDD 000034 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:24:47.776490 kernel: ACPI: FACP 0x000000009CFE1A79 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:24:47.776499 kernel: ACPI: DSDT 0x000000009CFE0040 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:24:47.776507 kernel: ACPI: FACS 0x000000009CFE0000 000040 Oct 2 19:24:47.776516 kernel: ACPI: APIC 0x000000009CFE1AED 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:24:47.776527 kernel: ACPI: HPET 0x000000009CFE1B7D 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:24:47.776536 kernel: ACPI: WAET 0x000000009CFE1BB5 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:24:47.776545 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe1a79-0x9cfe1aec] Oct 2 19:24:47.776554 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe1a78] Oct 2 19:24:47.776562 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Oct 2 19:24:47.776571 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe1aed-0x9cfe1b7c] Oct 2 19:24:47.776580 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe1b7d-0x9cfe1bb4] Oct 2 19:24:47.776589 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe1bb5-0x9cfe1bdc] Oct 2 19:24:47.776603 kernel: No NUMA configuration found Oct 2 19:24:47.776612 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdcfff] Oct 2 19:24:47.776621 kernel: NODE_DATA(0) allocated [mem 0x9cfd7000-0x9cfdcfff] Oct 2 19:24:47.776631 kernel: Zone ranges: Oct 2 19:24:47.776640 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:24:47.776650 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdcfff] Oct 2 19:24:47.776661 kernel: Normal empty Oct 2 19:24:47.776670 kernel: Movable zone start for each node Oct 2 19:24:47.776679 kernel: Early memory node ranges Oct 2 19:24:47.776689 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:24:47.776698 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdcfff] Oct 2 19:24:47.776708 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdcfff] Oct 2 19:24:47.776717 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:24:47.776726 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:24:47.776736 kernel: On node 0, zone DMA32: 12323 pages in unavailable ranges Oct 2 19:24:47.776747 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 2 19:24:47.776756 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:24:47.776765 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:24:47.776775 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:24:47.776785 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:24:47.776794 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:24:47.776803 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:24:47.776813 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:24:47.776822 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:24:47.776832 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:24:47.776841 kernel: TSC deadline timer available Oct 2 19:24:47.776850 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Oct 2 19:24:47.776859 kernel: kvm-guest: KVM setup pv remote TLB flush Oct 2 19:24:47.776867 kernel: kvm-guest: setup PV sched yield Oct 2 19:24:47.776876 kernel: [mem 0x9d000000-0xfeffbfff] available for PCI devices Oct 2 19:24:47.776885 kernel: Booting paravirtualized kernel on KVM Oct 2 19:24:47.776894 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:24:47.776903 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Oct 2 19:24:47.776912 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u524288 Oct 2 19:24:47.776950 kernel: pcpu-alloc: s185624 r8192 d31464 u524288 alloc=1*2097152 Oct 2 19:24:47.776959 kernel: pcpu-alloc: [0] 0 1 2 3 Oct 2 19:24:47.776968 kernel: kvm-guest: setup async PF for cpu 0 Oct 2 19:24:47.776977 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Oct 2 19:24:47.776986 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:24:47.776998 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:24:47.777007 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632733 Oct 2 19:24:47.777016 kernel: Policy zone: DMA32 Oct 2 19:24:47.777027 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:24:47.777039 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:24:47.777048 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:24:47.777058 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:24:47.777067 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:24:47.777077 kernel: Memory: 2438768K/2571756K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 132728K reserved, 0K cma-reserved) Oct 2 19:24:47.777086 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:24:47.777095 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:24:47.777104 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:24:47.777115 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:24:47.777125 kernel: rcu: RCU event tracing is enabled. Oct 2 19:24:47.777135 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:24:47.777153 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:24:47.777174 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:24:47.777184 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:24:47.777194 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:24:47.777203 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Oct 2 19:24:47.777212 kernel: random: crng init done Oct 2 19:24:47.777223 kernel: Console: colour VGA+ 80x25 Oct 2 19:24:47.777232 kernel: printk: console [ttyS0] enabled Oct 2 19:24:47.777241 kernel: ACPI: Core revision 20210730 Oct 2 19:24:47.777250 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Oct 2 19:24:47.777259 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:24:47.777267 kernel: x2apic enabled Oct 2 19:24:47.777276 kernel: Switched APIC routing to physical x2apic. Oct 2 19:24:47.777285 kernel: kvm-guest: setup PV IPIs Oct 2 19:24:47.777294 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 19:24:47.777305 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 19:24:47.777315 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Oct 2 19:24:47.777324 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Oct 2 19:24:47.777334 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Oct 2 19:24:47.777343 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Oct 2 19:24:47.777352 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:24:47.777361 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:24:47.777371 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:24:47.777381 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:24:47.777398 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Oct 2 19:24:47.777408 kernel: RETBleed: Mitigation: untrained return thunk Oct 2 19:24:47.777418 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Oct 2 19:24:47.777429 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Oct 2 19:24:47.777440 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:24:47.777450 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:24:47.777460 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:24:47.777470 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:24:47.777480 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Oct 2 19:24:47.777491 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:24:47.777501 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:24:47.777511 kernel: LSM: Security Framework initializing Oct 2 19:24:47.777521 kernel: SELinux: Initializing. Oct 2 19:24:47.777531 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:24:47.777542 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:24:47.777552 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Oct 2 19:24:47.777564 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Oct 2 19:24:47.777574 kernel: ... version: 0 Oct 2 19:24:47.777584 kernel: ... bit width: 48 Oct 2 19:24:47.777594 kernel: ... generic registers: 6 Oct 2 19:24:47.777604 kernel: ... value mask: 0000ffffffffffff Oct 2 19:24:47.777614 kernel: ... max period: 00007fffffffffff Oct 2 19:24:47.777624 kernel: ... fixed-purpose events: 0 Oct 2 19:24:47.777634 kernel: ... event mask: 000000000000003f Oct 2 19:24:47.777644 kernel: signal: max sigframe size: 1776 Oct 2 19:24:47.777654 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:24:47.777665 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:24:47.777675 kernel: x86: Booting SMP configuration: Oct 2 19:24:47.777685 kernel: .... node #0, CPUs: #1 Oct 2 19:24:47.777695 kernel: kvm-clock: cpu 1, msr 37f8a041, secondary cpu clock Oct 2 19:24:47.777705 kernel: kvm-guest: setup async PF for cpu 1 Oct 2 19:24:47.777714 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Oct 2 19:24:47.777724 kernel: #2 Oct 2 19:24:47.777735 kernel: kvm-clock: cpu 2, msr 37f8a081, secondary cpu clock Oct 2 19:24:47.777744 kernel: kvm-guest: setup async PF for cpu 2 Oct 2 19:24:47.777756 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Oct 2 19:24:47.777765 kernel: #3 Oct 2 19:24:47.777775 kernel: kvm-clock: cpu 3, msr 37f8a0c1, secondary cpu clock Oct 2 19:24:47.777785 kernel: kvm-guest: setup async PF for cpu 3 Oct 2 19:24:47.777795 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Oct 2 19:24:47.777805 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:24:47.777815 kernel: smpboot: Max logical packages: 1 Oct 2 19:24:47.777825 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Oct 2 19:24:47.777835 kernel: devtmpfs: initialized Oct 2 19:24:47.777846 kernel: x86/mm: Memory block size: 128MB Oct 2 19:24:47.777856 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:24:47.777867 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:24:47.777877 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:24:47.777887 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:24:47.777897 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:24:47.777907 kernel: audit: type=2000 audit(1696274688.016:1): state=initialized audit_enabled=0 res=1 Oct 2 19:24:47.777916 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:24:47.777927 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:24:47.777938 kernel: cpuidle: using governor menu Oct 2 19:24:47.777947 kernel: ACPI: bus type PCI registered Oct 2 19:24:47.777957 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:24:47.777967 kernel: dca service started, version 1.12.1 Oct 2 19:24:47.777977 kernel: PCI: Using configuration type 1 for base access Oct 2 19:24:47.777986 kernel: PCI: Using configuration type 1 for extended access Oct 2 19:24:47.777995 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:24:47.778005 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:24:47.778028 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:24:47.778044 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:24:47.778054 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:24:47.778064 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:24:47.778076 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:24:47.778086 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:24:47.778095 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:24:47.778104 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:24:47.778114 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:24:47.778123 kernel: ACPI: Interpreter enabled Oct 2 19:24:47.778141 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 19:24:47.778151 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:24:47.778171 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:24:47.778182 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 19:24:47.778192 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:24:47.778322 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:24:47.778338 kernel: acpiphp: Slot [3] registered Oct 2 19:24:47.778349 kernel: acpiphp: Slot [4] registered Oct 2 19:24:47.778361 kernel: acpiphp: Slot [5] registered Oct 2 19:24:47.778370 kernel: acpiphp: Slot [6] registered Oct 2 19:24:47.778380 kernel: acpiphp: Slot [7] registered Oct 2 19:24:47.778389 kernel: acpiphp: Slot [8] registered Oct 2 19:24:47.778399 kernel: acpiphp: Slot [9] registered Oct 2 19:24:47.778408 kernel: acpiphp: Slot [10] registered Oct 2 19:24:47.778418 kernel: acpiphp: Slot [11] registered Oct 2 19:24:47.778427 kernel: acpiphp: Slot [12] registered Oct 2 19:24:47.778437 kernel: acpiphp: Slot [13] registered Oct 2 19:24:47.778446 kernel: acpiphp: Slot [14] registered Oct 2 19:24:47.778457 kernel: acpiphp: Slot [15] registered Oct 2 19:24:47.778467 kernel: acpiphp: Slot [16] registered Oct 2 19:24:47.778476 kernel: acpiphp: Slot [17] registered Oct 2 19:24:47.778486 kernel: acpiphp: Slot [18] registered Oct 2 19:24:47.778495 kernel: acpiphp: Slot [19] registered Oct 2 19:24:47.778505 kernel: acpiphp: Slot [20] registered Oct 2 19:24:47.778514 kernel: acpiphp: Slot [21] registered Oct 2 19:24:47.778524 kernel: acpiphp: Slot [22] registered Oct 2 19:24:47.778533 kernel: acpiphp: Slot [23] registered Oct 2 19:24:47.778544 kernel: acpiphp: Slot [24] registered Oct 2 19:24:47.778554 kernel: acpiphp: Slot [25] registered Oct 2 19:24:47.778563 kernel: acpiphp: Slot [26] registered Oct 2 19:24:47.778573 kernel: acpiphp: Slot [27] registered Oct 2 19:24:47.778582 kernel: acpiphp: Slot [28] registered Oct 2 19:24:47.778592 kernel: acpiphp: Slot [29] registered Oct 2 19:24:47.778601 kernel: acpiphp: Slot [30] registered Oct 2 19:24:47.778611 kernel: acpiphp: Slot [31] registered Oct 2 19:24:47.778620 kernel: PCI host bridge to bus 0000:00 Oct 2 19:24:47.778718 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:24:47.778803 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:24:47.778885 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:24:47.778967 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Oct 2 19:24:47.779047 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Oct 2 19:24:47.779128 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:24:47.779282 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:24:47.779386 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:24:47.779486 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 19:24:47.779579 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Oct 2 19:24:47.779671 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 19:24:47.779765 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 19:24:47.779859 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 19:24:47.779951 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 19:24:47.780052 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 19:24:47.780154 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Oct 2 19:24:47.780263 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Oct 2 19:24:47.780370 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Oct 2 19:24:47.780463 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Oct 2 19:24:47.780554 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Oct 2 19:24:47.780650 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Oct 2 19:24:47.780741 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:24:47.780840 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:24:47.780934 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc09f] Oct 2 19:24:47.781029 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Oct 2 19:24:47.781123 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Oct 2 19:24:47.781247 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 19:24:47.781345 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 19:24:47.781445 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Oct 2 19:24:47.781540 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Oct 2 19:24:47.781656 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Oct 2 19:24:47.781752 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0a0-0xc0bf] Oct 2 19:24:47.781844 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Oct 2 19:24:47.781936 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Oct 2 19:24:47.782034 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Oct 2 19:24:47.782047 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:24:47.782058 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:24:47.782067 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:24:47.782077 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:24:47.782087 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:24:47.782096 kernel: iommu: Default domain type: Translated Oct 2 19:24:47.782106 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:24:47.782222 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 19:24:47.782321 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:24:47.782414 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 19:24:47.782427 kernel: vgaarb: loaded Oct 2 19:24:47.782437 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:24:47.782447 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:24:47.782457 kernel: PTP clock support registered Oct 2 19:24:47.782466 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:24:47.782476 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:24:47.782488 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:24:47.782498 kernel: e820: reserve RAM buffer [mem 0x9cfdd000-0x9fffffff] Oct 2 19:24:47.782508 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Oct 2 19:24:47.782517 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Oct 2 19:24:47.782527 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:24:47.782537 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:24:47.782547 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:24:47.782556 kernel: pnp: PnP ACPI init Oct 2 19:24:47.782655 kernel: pnp 00:02: [dma 2] Oct 2 19:24:47.782672 kernel: pnp: PnP ACPI: found 6 devices Oct 2 19:24:47.782682 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:24:47.782692 kernel: NET: Registered PF_INET protocol family Oct 2 19:24:47.782702 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:24:47.782711 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:24:47.782721 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:24:47.782731 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:24:47.782741 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:24:47.782752 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:24:47.782762 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:24:47.782772 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:24:47.782782 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:24:47.782791 kernel: NET: Registered PF_XDP protocol family Oct 2 19:24:47.782876 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:24:47.782957 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:24:47.783040 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:24:47.783121 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Oct 2 19:24:47.783228 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Oct 2 19:24:47.783325 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 19:24:47.783418 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:24:47.783510 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:24:47.783523 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:24:47.783533 kernel: Initialise system trusted keyrings Oct 2 19:24:47.783544 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:24:47.783553 kernel: Key type asymmetric registered Oct 2 19:24:47.783565 kernel: Asymmetric key parser 'x509' registered Oct 2 19:24:47.783575 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:24:47.783585 kernel: io scheduler mq-deadline registered Oct 2 19:24:47.783594 kernel: io scheduler kyber registered Oct 2 19:24:47.783604 kernel: io scheduler bfq registered Oct 2 19:24:47.783613 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:24:47.783623 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 19:24:47.783633 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Oct 2 19:24:47.783643 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 19:24:47.783654 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:24:47.783664 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:24:47.783673 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:24:47.783683 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:24:47.783692 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:24:47.783785 kernel: rtc_cmos 00:05: RTC can wake from S4 Oct 2 19:24:47.783799 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:24:47.783883 kernel: rtc_cmos 00:05: registered as rtc0 Oct 2 19:24:47.783971 kernel: rtc_cmos 00:05: setting system clock to 2023-10-02T19:24:47 UTC (1696274687) Oct 2 19:24:47.784056 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Oct 2 19:24:47.784069 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:24:47.784079 kernel: Segment Routing with IPv6 Oct 2 19:24:47.784089 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:24:47.784098 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:24:47.784108 kernel: Key type dns_resolver registered Oct 2 19:24:47.784118 kernel: IPI shorthand broadcast: enabled Oct 2 19:24:47.784128 kernel: sched_clock: Marking stable (347210540, 73784874)->(446186258, -25190844) Oct 2 19:24:47.784147 kernel: registered taskstats version 1 Oct 2 19:24:47.784157 kernel: Loading compiled-in X.509 certificates Oct 2 19:24:47.784177 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:24:47.784187 kernel: Key type .fscrypt registered Oct 2 19:24:47.784196 kernel: Key type fscrypt-provisioning registered Oct 2 19:24:47.784206 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:24:47.784216 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:24:47.784225 kernel: ima: No architecture policies found Oct 2 19:24:47.784237 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:24:47.784247 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:24:47.784256 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:24:47.784266 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:24:47.784276 kernel: Run /init as init process Oct 2 19:24:47.784285 kernel: with arguments: Oct 2 19:24:47.784295 kernel: /init Oct 2 19:24:47.784305 kernel: with environment: Oct 2 19:24:47.784324 kernel: HOME=/ Oct 2 19:24:47.784335 kernel: TERM=linux Oct 2 19:24:47.784347 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:24:47.784359 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:24:47.784372 systemd[1]: Detected virtualization kvm. Oct 2 19:24:47.784383 systemd[1]: Detected architecture x86-64. Oct 2 19:24:47.784394 systemd[1]: Running in initrd. Oct 2 19:24:47.784404 systemd[1]: No hostname configured, using default hostname. Oct 2 19:24:47.784414 systemd[1]: Hostname set to . Oct 2 19:24:47.784427 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:24:47.784437 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:24:47.784448 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:24:47.784458 systemd[1]: Reached target cryptsetup.target. Oct 2 19:24:47.784469 systemd[1]: Reached target paths.target. Oct 2 19:24:47.784479 systemd[1]: Reached target slices.target. Oct 2 19:24:47.784489 systemd[1]: Reached target swap.target. Oct 2 19:24:47.784500 systemd[1]: Reached target timers.target. Oct 2 19:24:47.784513 systemd[1]: Listening on iscsid.socket. Oct 2 19:24:47.784523 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:24:47.784534 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:24:47.784545 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:24:47.784555 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:24:47.784566 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:24:47.784577 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:24:47.784588 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:24:47.784600 systemd[1]: Reached target sockets.target. Oct 2 19:24:47.784610 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:24:47.784621 systemd[1]: Finished network-cleanup.service. Oct 2 19:24:47.784632 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:24:47.784642 systemd[1]: Starting systemd-journald.service... Oct 2 19:24:47.784653 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:24:47.784665 systemd[1]: Starting systemd-resolved.service... Oct 2 19:24:47.784676 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:24:47.784686 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:24:47.784697 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:24:47.784708 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:24:47.784719 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:24:47.784733 systemd-journald[198]: Journal started Oct 2 19:24:47.784782 systemd-journald[198]: Runtime Journal (/run/log/journal/3df9db97b9e046c0aba0a53069f87b90) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:24:47.775514 systemd-modules-load[199]: Inserted module 'overlay' Oct 2 19:24:47.807079 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:24:47.807107 kernel: Bridge firewalling registered Oct 2 19:24:47.807121 kernel: audit: type=1130 audit(1696274687.802:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.807141 systemd[1]: Started systemd-journald.service. Oct 2 19:24:47.807157 kernel: audit: type=1130 audit(1696274687.806:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.799321 systemd-modules-load[199]: Inserted module 'br_netfilter' Oct 2 19:24:47.813089 kernel: audit: type=1130 audit(1696274687.809:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.813108 kernel: audit: type=1130 audit(1696274687.812:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.799413 systemd-resolved[200]: Positive Trust Anchors: Oct 2 19:24:47.799422 systemd-resolved[200]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:24:47.818515 kernel: SCSI subsystem initialized Oct 2 19:24:47.799448 systemd-resolved[200]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:24:47.801639 systemd-resolved[200]: Defaulting to hostname 'linux'. Oct 2 19:24:47.807225 systemd[1]: Started systemd-resolved.service. Oct 2 19:24:47.809715 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:24:47.813205 systemd[1]: Reached target nss-lookup.target. Oct 2 19:24:47.816605 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:24:47.829666 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:24:47.829692 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:24:47.830546 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:24:47.830736 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:24:47.834501 kernel: audit: type=1130 audit(1696274687.831:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.831977 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:24:47.834492 systemd-modules-load[199]: Inserted module 'dm_multipath' Oct 2 19:24:47.840114 kernel: audit: type=1130 audit(1696274687.835:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.835046 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:24:47.838659 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:24:47.842404 dracut-cmdline[214]: dracut-dracut-053 Oct 2 19:24:47.844114 dracut-cmdline[214]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:24:47.846617 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:24:47.850185 kernel: audit: type=1130 audit(1696274687.847:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.889188 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:24:47.899190 kernel: iscsi: registered transport (tcp) Oct 2 19:24:47.917188 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:24:47.917213 kernel: QLogic iSCSI HBA Driver Oct 2 19:24:47.934983 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:24:47.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.935972 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:24:47.938607 kernel: audit: type=1130 audit(1696274687.935:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.978187 kernel: raid6: avx2x4 gen() 30348 MB/s Oct 2 19:24:47.995185 kernel: raid6: avx2x4 xor() 7468 MB/s Oct 2 19:24:48.012185 kernel: raid6: avx2x2 gen() 32373 MB/s Oct 2 19:24:48.029180 kernel: raid6: avx2x2 xor() 19355 MB/s Oct 2 19:24:48.046182 kernel: raid6: avx2x1 gen() 26522 MB/s Oct 2 19:24:48.063189 kernel: raid6: avx2x1 xor() 15421 MB/s Oct 2 19:24:48.080182 kernel: raid6: sse2x4 gen() 14835 MB/s Oct 2 19:24:48.097186 kernel: raid6: sse2x4 xor() 7209 MB/s Oct 2 19:24:48.114190 kernel: raid6: sse2x2 gen() 14809 MB/s Oct 2 19:24:48.131180 kernel: raid6: sse2x2 xor() 9826 MB/s Oct 2 19:24:48.148179 kernel: raid6: sse2x1 gen() 11901 MB/s Oct 2 19:24:48.165546 kernel: raid6: sse2x1 xor() 7826 MB/s Oct 2 19:24:48.165561 kernel: raid6: using algorithm avx2x2 gen() 32373 MB/s Oct 2 19:24:48.165569 kernel: raid6: .... xor() 19355 MB/s, rmw enabled Oct 2 19:24:48.165578 kernel: raid6: using avx2x2 recovery algorithm Oct 2 19:24:48.177179 kernel: xor: automatically using best checksumming function avx Oct 2 19:24:48.263194 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:24:48.269676 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:24:48.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.270000 audit: BPF prog-id=7 op=LOAD Oct 2 19:24:48.272000 audit: BPF prog-id=8 op=LOAD Oct 2 19:24:48.272843 systemd[1]: Starting systemd-udevd.service... Oct 2 19:24:48.273801 kernel: audit: type=1130 audit(1696274688.269:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.283995 systemd-udevd[398]: Using default interface naming scheme 'v252'. Oct 2 19:24:48.287671 systemd[1]: Started systemd-udevd.service. Oct 2 19:24:48.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.288823 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:24:48.296771 dracut-pre-trigger[405]: rd.md=0: removing MD RAID activation Oct 2 19:24:48.315037 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:24:48.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.316528 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:24:48.347501 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:24:48.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.379182 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:24:48.391184 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:24:48.393683 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:24:48.393712 kernel: AES CTR mode by8 optimization enabled Oct 2 19:24:48.399187 kernel: libata version 3.00 loaded. Oct 2 19:24:48.402195 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 19:24:48.402352 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:24:48.402366 kernel: scsi host0: ata_piix Oct 2 19:24:48.403185 kernel: scsi host1: ata_piix Oct 2 19:24:48.403318 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Oct 2 19:24:48.403332 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Oct 2 19:24:48.563188 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Oct 2 19:24:48.563253 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Oct 2 19:24:48.576186 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (466) Oct 2 19:24:48.583068 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:24:48.583391 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:24:48.587568 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:24:48.590587 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:24:48.593732 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:24:48.594767 systemd[1]: Starting disk-uuid.service... Oct 2 19:24:48.597572 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Oct 2 19:24:48.597720 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:24:48.602179 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:24:48.607183 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:24:48.613190 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Oct 2 19:24:49.610187 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:24:49.610607 disk-uuid[526]: The operation has completed successfully. Oct 2 19:24:49.629018 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:24:49.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.629100 systemd[1]: Finished disk-uuid.service. Oct 2 19:24:49.641430 systemd[1]: Starting verity-setup.service... Oct 2 19:24:49.653192 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:24:49.681754 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:24:49.683803 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:24:49.685157 systemd[1]: Finished verity-setup.service. Oct 2 19:24:49.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.750187 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:24:49.750185 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:24:49.750624 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:24:49.752194 systemd[1]: Starting ignition-setup.service... Oct 2 19:24:49.753619 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:24:49.761519 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:24:49.761545 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:24:49.761558 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:24:49.768134 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:24:49.776484 systemd[1]: Finished ignition-setup.service. Oct 2 19:24:49.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.778415 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:24:49.815969 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:24:49.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.817000 audit: BPF prog-id=9 op=LOAD Oct 2 19:24:49.817773 systemd[1]: Starting systemd-networkd.service... Oct 2 19:24:49.835529 systemd-networkd[704]: lo: Link UP Oct 2 19:24:49.835537 systemd-networkd[704]: lo: Gained carrier Oct 2 19:24:49.835898 systemd-networkd[704]: Enumeration completed Oct 2 19:24:49.835954 systemd[1]: Started systemd-networkd.service. Oct 2 19:24:49.836147 systemd-networkd[704]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:24:49.837313 systemd-networkd[704]: eth0: Link UP Oct 2 19:24:49.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.837316 systemd-networkd[704]: eth0: Gained carrier Oct 2 19:24:49.839615 systemd[1]: Reached target network.target. Oct 2 19:24:49.841145 systemd[1]: Starting iscsiuio.service... Oct 2 19:24:49.844839 systemd[1]: Started iscsiuio.service. Oct 2 19:24:49.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.846375 systemd[1]: Starting iscsid.service... Oct 2 19:24:49.849481 iscsid[709]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:24:49.849481 iscsid[709]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:24:49.849481 iscsid[709]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:24:49.849481 iscsid[709]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:24:49.849481 iscsid[709]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:24:49.849481 iscsid[709]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:24:49.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.850455 systemd[1]: Started iscsid.service. Oct 2 19:24:49.854256 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:24:49.858254 systemd-networkd[704]: eth0: DHCPv4 address 10.0.0.11/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:24:49.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.863718 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:24:49.864343 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:24:49.864908 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:24:49.865536 systemd[1]: Reached target remote-fs.target. Oct 2 19:24:49.867222 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:24:49.874019 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:24:49.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.876009 ignition[629]: Ignition 2.14.0 Oct 2 19:24:49.876022 ignition[629]: Stage: fetch-offline Oct 2 19:24:49.876091 ignition[629]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:24:49.876101 ignition[629]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:24:49.876205 ignition[629]: parsed url from cmdline: "" Oct 2 19:24:49.876208 ignition[629]: no config URL provided Oct 2 19:24:49.876212 ignition[629]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:24:49.876218 ignition[629]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:24:49.876232 ignition[629]: op(1): [started] loading QEMU firmware config module Oct 2 19:24:49.876236 ignition[629]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:24:49.883417 ignition[629]: op(1): [finished] loading QEMU firmware config module Oct 2 19:24:49.883437 ignition[629]: QEMU firmware config was not found. Ignoring... Oct 2 19:24:49.909846 ignition[629]: parsing config with SHA512: 124cf0f9c8e04b41b1c208d5720027cfe4ac477c10f3f2a0a8577dcc609dd823d76b40ea98602e6cd09f24f3e61c18a0d6f4c0de4f7332d9612bfc548b54b7c1 Oct 2 19:24:49.935223 unknown[629]: fetched base config from "system" Oct 2 19:24:49.935237 unknown[629]: fetched user config from "qemu" Oct 2 19:24:49.936788 ignition[629]: fetch-offline: fetch-offline passed Oct 2 19:24:49.937436 ignition[629]: Ignition finished successfully Oct 2 19:24:49.939025 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:24:49.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.940232 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:24:49.940931 systemd[1]: Starting ignition-kargs.service... Oct 2 19:24:49.948741 ignition[725]: Ignition 2.14.0 Oct 2 19:24:49.948749 ignition[725]: Stage: kargs Oct 2 19:24:49.948833 ignition[725]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:24:49.948842 ignition[725]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:24:49.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.951148 systemd[1]: Finished ignition-kargs.service. Oct 2 19:24:49.949825 ignition[725]: kargs: kargs passed Oct 2 19:24:49.952851 systemd[1]: Starting ignition-disks.service... Oct 2 19:24:49.949860 ignition[725]: Ignition finished successfully Oct 2 19:24:49.959857 ignition[731]: Ignition 2.14.0 Oct 2 19:24:49.959867 ignition[731]: Stage: disks Oct 2 19:24:49.959979 ignition[731]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:24:49.962374 systemd[1]: Finished ignition-disks.service. Oct 2 19:24:49.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.959991 ignition[731]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:24:49.963144 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:24:49.961285 ignition[731]: disks: disks passed Oct 2 19:24:49.963945 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:24:49.961322 ignition[731]: Ignition finished successfully Oct 2 19:24:49.964148 systemd[1]: Reached target local-fs.target. Oct 2 19:24:49.966154 systemd[1]: Reached target sysinit.target. Oct 2 19:24:49.966428 systemd[1]: Reached target basic.target. Oct 2 19:24:49.967866 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:24:49.972346 systemd-resolved[200]: Detected conflict on linux IN A 10.0.0.11 Oct 2 19:24:49.972362 systemd-resolved[200]: Hostname conflict, changing published hostname from 'linux' to 'linux7'. Oct 2 19:24:49.981553 systemd-fsck[739]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:24:49.986011 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:24:49.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.987204 systemd[1]: Mounting sysroot.mount... Oct 2 19:24:49.992061 systemd[1]: Mounted sysroot.mount. Oct 2 19:24:49.992395 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:24:49.992960 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:24:49.994506 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:24:49.994949 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:24:49.994979 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:24:49.994997 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:24:49.997209 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:24:49.998668 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:24:50.003090 initrd-setup-root[749]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:24:50.007437 initrd-setup-root[757]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:24:50.010650 initrd-setup-root[765]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:24:50.013974 initrd-setup-root[773]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:24:50.039398 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:24:50.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:50.041475 systemd[1]: Starting ignition-mount.service... Oct 2 19:24:50.042497 systemd[1]: Starting sysroot-boot.service... Oct 2 19:24:50.049153 bash[791]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:24:50.057034 systemd[1]: Finished sysroot-boot.service. Oct 2 19:24:50.057256 ignition[792]: INFO : Ignition 2.14.0 Oct 2 19:24:50.057256 ignition[792]: INFO : Stage: mount Oct 2 19:24:50.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:50.059108 ignition[792]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:24:50.059108 ignition[792]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:24:50.059108 ignition[792]: INFO : mount: mount passed Oct 2 19:24:50.059108 ignition[792]: INFO : Ignition finished successfully Oct 2 19:24:50.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:50.059874 systemd[1]: Finished ignition-mount.service. Oct 2 19:24:50.694689 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:24:50.700473 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (800) Oct 2 19:24:50.700504 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:24:50.700517 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:24:50.701461 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:24:50.704556 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:24:50.705899 systemd[1]: Starting ignition-files.service... Oct 2 19:24:50.718296 ignition[820]: INFO : Ignition 2.14.0 Oct 2 19:24:50.718296 ignition[820]: INFO : Stage: files Oct 2 19:24:50.719532 ignition[820]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:24:50.719532 ignition[820]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:24:50.721216 ignition[820]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:24:50.722011 ignition[820]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:24:50.722011 ignition[820]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:24:50.723868 ignition[820]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:24:50.723868 ignition[820]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:24:50.723868 ignition[820]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:24:50.723745 unknown[820]: wrote ssh authorized keys file for user: core Oct 2 19:24:50.727322 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:24:50.727322 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:24:51.307637 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:24:51.421146 ignition[820]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:24:51.423131 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:24:51.423131 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:24:51.423131 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:24:51.653417 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:24:51.731087 ignition[820]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 19:24:51.733624 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:24:51.733624 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:24:51.733624 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:24:51.769352 systemd-networkd[704]: eth0: Gained IPv6LL Oct 2 19:24:51.830373 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:24:52.569046 ignition[820]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 19:24:52.571105 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:24:52.571105 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:24:52.571105 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:24:52.631300 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:24:54.179519 ignition[820]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 19:24:54.179519 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:24:54.183201 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:24:54.183201 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:24:54.240719 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:24:54.919267 ignition[820]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Oct 2 19:24:54.919267 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:24:54.922256 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:24:54.922256 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:24:54.922256 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:24:54.922256 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:24:55.147516 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:24:55.215893 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:24:55.215893 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:24:55.218442 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:24:55.218442 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:24:55.218442 ignition[820]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:24:55.218442 ignition[820]: INFO : files: op(c): [started] processing unit "coreos-metadata.service" Oct 2 19:24:56.466130 ignition[820]: INFO : files: op(c): op(d): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:24:56.467972 ignition[820]: INFO : files: op(c): op(d): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:24:56.467972 ignition[820]: INFO : files: op(c): [finished] processing unit "coreos-metadata.service" Oct 2 19:24:56.467972 ignition[820]: INFO : files: op(e): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:24:56.467972 ignition[820]: INFO : files: op(e): op(f): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:24:56.472732 ignition[820]: INFO : files: op(e): op(f): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:24:56.472732 ignition[820]: INFO : files: op(e): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:24:56.472732 ignition[820]: INFO : files: op(10): [started] processing unit "prepare-critools.service" Oct 2 19:24:56.472732 ignition[820]: INFO : files: op(10): op(11): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:24:56.477991 ignition[820]: INFO : files: op(10): op(11): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:24:56.477991 ignition[820]: INFO : files: op(10): [finished] processing unit "prepare-critools.service" Oct 2 19:24:56.480565 ignition[820]: INFO : files: op(12): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:24:56.480565 ignition[820]: INFO : files: op(12): op(13): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:24:56.523637 ignition[820]: INFO : files: op(12): op(13): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:24:56.525089 ignition[820]: INFO : files: op(12): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:24:56.525089 ignition[820]: INFO : files: op(14): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:24:56.525089 ignition[820]: INFO : files: op(14): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:24:56.525089 ignition[820]: INFO : files: op(15): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:24:56.525089 ignition[820]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:24:56.530171 ignition[820]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:24:56.531445 ignition[820]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:24:56.532709 ignition[820]: INFO : files: files passed Oct 2 19:24:56.533272 ignition[820]: INFO : Ignition finished successfully Oct 2 19:24:56.534401 systemd[1]: Finished ignition-files.service. Oct 2 19:24:56.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.536361 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:24:56.536380 kernel: audit: type=1130 audit(1696274696.535:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.536962 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:24:56.539722 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:24:56.541004 initrd-setup-root-after-ignition[844]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:24:56.542385 systemd[1]: Starting ignition-quench.service... Oct 2 19:24:56.543449 initrd-setup-root-after-ignition[846]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:24:56.544662 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:24:56.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.546101 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:24:56.548494 kernel: audit: type=1130 audit(1696274696.545:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.546174 systemd[1]: Finished ignition-quench.service. Oct 2 19:24:56.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.549565 systemd[1]: Reached target ignition-complete.target. Oct 2 19:24:56.554140 kernel: audit: type=1130 audit(1696274696.549:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.554154 kernel: audit: type=1131 audit(1696274696.549:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.554657 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:24:56.564916 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:24:56.565566 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:24:56.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.566622 systemd[1]: Reached target initrd-fs.target. Oct 2 19:24:56.571176 kernel: audit: type=1130 audit(1696274696.566:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.571191 kernel: audit: type=1131 audit(1696274696.566:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.566000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.571152 systemd[1]: Reached target initrd.target. Oct 2 19:24:56.572101 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:24:56.573462 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:24:56.582481 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:24:56.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.584110 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:24:56.586396 kernel: audit: type=1130 audit(1696274696.583:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.591969 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:24:56.593030 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:24:56.594205 systemd[1]: Stopped target timers.target. Oct 2 19:24:56.595184 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:24:56.595840 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:24:56.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.596981 systemd[1]: Stopped target initrd.target. Oct 2 19:24:56.599686 kernel: audit: type=1131 audit(1696274696.596:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.599073 systemd[1]: Stopped target basic.target. Oct 2 19:24:56.599870 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:24:56.600720 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:24:56.601808 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:24:56.602021 systemd[1]: Stopped target remote-fs.target. Oct 2 19:24:56.602236 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:24:56.602452 systemd[1]: Stopped target sysinit.target. Oct 2 19:24:56.602650 systemd[1]: Stopped target local-fs.target. Oct 2 19:24:56.602851 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:24:56.603067 systemd[1]: Stopped target swap.target. Oct 2 19:24:56.603356 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:24:56.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.611200 kernel: audit: type=1131 audit(1696274696.608:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.603462 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:24:56.608665 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:24:56.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.611466 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:24:56.615297 kernel: audit: type=1131 audit(1696274696.612:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.611546 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:24:56.612434 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:24:56.612509 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:24:56.615221 systemd[1]: Stopped target paths.target. Oct 2 19:24:56.615425 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:24:56.619209 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:24:56.620356 systemd[1]: Stopped target slices.target. Oct 2 19:24:56.620708 systemd[1]: Stopped target sockets.target. Oct 2 19:24:56.620927 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:24:56.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.621027 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:24:56.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.622414 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:24:56.622491 systemd[1]: Stopped ignition-files.service. Oct 2 19:24:56.624409 systemd[1]: Stopping ignition-mount.service... Oct 2 19:24:56.626513 iscsid[709]: iscsid shutting down. Oct 2 19:24:56.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.624828 systemd[1]: Stopping iscsid.service... Oct 2 19:24:56.625955 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:24:56.626082 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:24:56.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.627461 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:24:56.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.627785 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:24:56.627908 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:24:56.629219 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:24:56.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.629315 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:24:56.631387 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:24:56.631463 systemd[1]: Stopped iscsid.service. Oct 2 19:24:56.632101 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:24:56.632181 systemd[1]: Closed iscsid.socket. Oct 2 19:24:56.635221 systemd[1]: Stopping iscsiuio.service... Oct 2 19:24:56.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.636543 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:24:56.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.636624 systemd[1]: Stopped iscsiuio.service. Oct 2 19:24:56.637532 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:24:56.637592 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:24:56.638863 systemd[1]: Stopped target network.target. Oct 2 19:24:56.639192 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:24:56.639217 systemd[1]: Closed iscsiuio.socket. Oct 2 19:24:56.639556 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:24:56.639837 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:24:56.640737 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:24:56.646602 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:24:56.646710 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:24:56.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.648895 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:24:56.648990 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:24:56.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.652000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:24:56.652199 systemd-networkd[704]: eth0: DHCPv6 lease lost Oct 2 19:24:56.653095 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:24:56.653194 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:24:56.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.654874 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:24:56.654939 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:24:56.655878 systemd[1]: Stopping network-cleanup.service... Oct 2 19:24:56.656632 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:24:56.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.656669 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:24:56.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.656882 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:24:56.656915 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:24:56.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.659201 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:24:56.659230 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:24:56.661958 ignition[861]: INFO : Ignition 2.14.0 Oct 2 19:24:56.661958 ignition[861]: INFO : Stage: umount Oct 2 19:24:56.662000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:24:56.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.660560 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:24:56.664318 ignition[861]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:24:56.664318 ignition[861]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:24:56.662327 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:24:56.662392 systemd[1]: Stopped network-cleanup.service. Oct 2 19:24:56.667210 ignition[861]: INFO : umount: umount passed Oct 2 19:24:56.667712 ignition[861]: INFO : Ignition finished successfully Oct 2 19:24:56.668886 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:24:56.668966 systemd[1]: Stopped ignition-mount.service. Oct 2 19:24:56.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.670058 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:24:56.670000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.670088 systemd[1]: Stopped ignition-disks.service. Oct 2 19:24:56.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.670931 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:24:56.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.670962 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:24:56.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.671425 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:24:56.671449 systemd[1]: Stopped ignition-setup.service. Oct 2 19:24:56.671622 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:24:56.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.671646 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:24:56.671878 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:24:56.675110 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:24:56.675262 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:24:56.675825 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:24:56.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.675864 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:24:56.676902 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:24:56.676930 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:24:56.677816 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:24:56.684000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.677846 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:24:56.678671 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:24:56.678699 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:24:56.678872 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:24:56.678908 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:24:56.679624 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:24:56.681700 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:24:56.681737 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:24:56.684011 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:24:56.684081 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:24:56.684822 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:24:56.686445 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:24:56.702020 systemd[1]: Switching root. Oct 2 19:24:56.719329 systemd-journald[198]: Journal stopped Oct 2 19:24:59.109179 systemd-journald[198]: Received SIGTERM from PID 1 (systemd). Oct 2 19:24:59.109239 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:24:59.109257 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:24:59.109271 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:24:59.109285 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:24:59.109304 kernel: SELinux: policy capability open_perms=1 Oct 2 19:24:59.109318 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:24:59.109332 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:24:59.109345 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:24:59.109362 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:24:59.109375 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:24:59.109391 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:24:59.109405 systemd[1]: Successfully loaded SELinux policy in 41.920ms. Oct 2 19:24:59.109426 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.277ms. Oct 2 19:24:59.109443 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:24:59.109461 systemd[1]: Detected virtualization kvm. Oct 2 19:24:59.109476 systemd[1]: Detected architecture x86-64. Oct 2 19:24:59.109495 systemd[1]: Detected first boot. Oct 2 19:24:59.109514 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:24:59.109529 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:24:59.109544 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:24:59.109559 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:24:59.109580 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:24:59.109595 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:24:59.109611 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:24:59.109626 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:24:59.109641 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:24:59.109655 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:24:59.109670 systemd[1]: Created slice system-getty.slice. Oct 2 19:24:59.109684 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:24:59.109699 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:24:59.109712 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:24:59.109724 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:24:59.109738 systemd[1]: Created slice user.slice. Oct 2 19:24:59.109750 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:24:59.109762 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:24:59.109774 systemd[1]: Set up automount boot.automount. Oct 2 19:24:59.109786 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:24:59.109798 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:24:59.109810 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:24:59.109830 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:24:59.109844 systemd[1]: Reached target integritysetup.target. Oct 2 19:24:59.109856 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:24:59.109868 systemd[1]: Reached target remote-fs.target. Oct 2 19:24:59.109880 systemd[1]: Reached target slices.target. Oct 2 19:24:59.109892 systemd[1]: Reached target swap.target. Oct 2 19:24:59.109904 systemd[1]: Reached target torcx.target. Oct 2 19:24:59.109916 systemd[1]: Reached target veritysetup.target. Oct 2 19:24:59.109929 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:24:59.109951 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:24:59.109968 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:24:59.109981 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:24:59.109995 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:24:59.110009 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:24:59.110027 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:24:59.110041 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:24:59.110055 systemd[1]: Mounting media.mount... Oct 2 19:24:59.110070 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:24:59.110085 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:24:59.110102 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:24:59.110116 systemd[1]: Mounting tmp.mount... Oct 2 19:24:59.110130 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:24:59.110144 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:24:59.110157 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:24:59.110197 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:24:59.110212 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:24:59.110225 systemd[1]: Starting modprobe@drm.service... Oct 2 19:24:59.110237 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:24:59.110254 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:24:59.110267 systemd[1]: Starting modprobe@loop.service... Oct 2 19:24:59.110282 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:24:59.110296 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:24:59.110310 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:24:59.110325 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:24:59.110340 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:24:59.110354 systemd[1]: Stopped systemd-journald.service. Oct 2 19:24:59.110368 systemd[1]: Starting systemd-journald.service... Oct 2 19:24:59.110385 kernel: fuse: init (API version 7.34) Oct 2 19:24:59.110399 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:24:59.110414 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:24:59.110429 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:24:59.110444 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:24:59.110458 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:24:59.110472 systemd[1]: Stopped verity-setup.service. Oct 2 19:24:59.110487 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:24:59.110501 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:24:59.110516 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:24:59.110530 systemd[1]: Mounted media.mount. Oct 2 19:24:59.110544 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:24:59.110559 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:24:59.110573 kernel: loop: module loaded Oct 2 19:24:59.110586 systemd[1]: Mounted tmp.mount. Oct 2 19:24:59.110601 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:24:59.110617 systemd-journald[964]: Journal started Oct 2 19:24:59.110667 systemd-journald[964]: Runtime Journal (/run/log/journal/3df9db97b9e046c0aba0a53069f87b90) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:24:56.793000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:24:56.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:24:56.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:24:56.831000 audit: BPF prog-id=10 op=LOAD Oct 2 19:24:56.831000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:24:56.831000 audit: BPF prog-id=11 op=LOAD Oct 2 19:24:56.831000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:24:58.999000 audit: BPF prog-id=12 op=LOAD Oct 2 19:24:58.999000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:24:58.999000 audit: BPF prog-id=13 op=LOAD Oct 2 19:24:58.999000 audit: BPF prog-id=14 op=LOAD Oct 2 19:24:58.999000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:24:58.999000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:24:59.000000 audit: BPF prog-id=15 op=LOAD Oct 2 19:24:59.000000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:24:59.000000 audit: BPF prog-id=16 op=LOAD Oct 2 19:24:59.000000 audit: BPF prog-id=17 op=LOAD Oct 2 19:24:59.000000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:24:59.000000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:24:59.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.004000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.010000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:24:59.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.083000 audit: BPF prog-id=18 op=LOAD Oct 2 19:24:59.083000 audit: BPF prog-id=19 op=LOAD Oct 2 19:24:59.083000 audit: BPF prog-id=20 op=LOAD Oct 2 19:24:59.083000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:24:59.083000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:24:59.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.107000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:24:59.107000 audit[964]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffc00de6c50 a2=4000 a3=7ffc00de6cec items=0 ppid=1 pid=964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:59.107000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:24:56.889826 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:24:58.998406 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:24:59.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.890090 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:24:58.998416 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:24:56.890107 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:24:59.001477 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:24:56.890135 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:24:56.890144 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:24:56.890181 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:24:56.890192 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:24:56.890381 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:24:56.890425 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:24:56.890439 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:24:56.890800 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:24:56.890838 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:24:56.890859 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:24:59.113208 systemd[1]: Started systemd-journald.service. Oct 2 19:24:59.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:56.890875 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:24:56.890897 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:24:56.890909 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:56Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:24:58.737235 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:58Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:24:58.737494 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:58Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:24:58.737577 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:58Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:24:59.113734 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:24:58.737715 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:58Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:24:59.113967 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:24:58.737758 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:58Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:24:58.737808 /usr/lib/systemd/system-generators/torcx-generator[895]: time="2023-10-02T19:24:58Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:24:59.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.114947 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:24:59.115141 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:24:59.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.116085 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:24:59.116315 systemd[1]: Finished modprobe@drm.service. Oct 2 19:24:59.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.116000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.117115 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:24:59.117356 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:24:59.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.118434 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:24:59.118646 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:24:59.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.119477 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:24:59.119702 systemd[1]: Finished modprobe@loop.service. Oct 2 19:24:59.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.120000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.120641 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:24:59.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.121946 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:24:59.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.122862 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:24:59.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.123667 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:24:59.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.124603 systemd[1]: Reached target network-pre.target. Oct 2 19:24:59.126314 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:24:59.127774 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:24:59.128555 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:24:59.130031 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:24:59.131514 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:24:59.132225 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:24:59.133301 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:24:59.133914 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:24:59.135314 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:24:59.137022 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:24:59.140656 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:24:59.141399 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:24:59.142509 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:24:59.143324 systemd-journald[964]: Time spent on flushing to /var/log/journal/3df9db97b9e046c0aba0a53069f87b90 is 14.926ms for 1101 entries. Oct 2 19:24:59.143324 systemd-journald[964]: System Journal (/var/log/journal/3df9db97b9e046c0aba0a53069f87b90) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:24:59.192801 systemd-journald[964]: Received client request to flush runtime journal. Oct 2 19:24:59.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.143324 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:24:59.147304 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:24:59.193778 udevadm[1000]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:24:59.153344 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:24:59.175686 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:24:59.177330 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:24:59.194082 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:24:59.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.807092 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:24:59.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.808000 audit: BPF prog-id=21 op=LOAD Oct 2 19:24:59.808000 audit: BPF prog-id=22 op=LOAD Oct 2 19:24:59.808000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:24:59.808000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:24:59.808977 systemd[1]: Starting systemd-udevd.service... Oct 2 19:24:59.824010 systemd-udevd[1001]: Using default interface naming scheme 'v252'. Oct 2 19:24:59.838177 systemd[1]: Started systemd-udevd.service. Oct 2 19:24:59.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.839000 audit: BPF prog-id=23 op=LOAD Oct 2 19:24:59.840257 systemd[1]: Starting systemd-networkd.service... Oct 2 19:24:59.845000 audit: BPF prog-id=24 op=LOAD Oct 2 19:24:59.845000 audit: BPF prog-id=25 op=LOAD Oct 2 19:24:59.845000 audit: BPF prog-id=26 op=LOAD Oct 2 19:24:59.846227 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:24:59.870287 systemd[1]: Started systemd-userdbd.service. Oct 2 19:24:59.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.873955 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:24:59.893921 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:24:59.909197 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:24:59.945632 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:24:59.945032 systemd-networkd[1006]: lo: Link UP Oct 2 19:24:59.945039 systemd-networkd[1006]: lo: Gained carrier Oct 2 19:24:59.945376 systemd-networkd[1006]: Enumeration completed Oct 2 19:24:59.945457 systemd[1]: Started systemd-networkd.service. Oct 2 19:24:59.945594 systemd-networkd[1006]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:24:59.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.946908 systemd-networkd[1006]: eth0: Link UP Oct 2 19:24:59.946913 systemd-networkd[1006]: eth0: Gained carrier Oct 2 19:24:59.961289 systemd-networkd[1006]: eth0: DHCPv4 address 10.0.0.11/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:24:59.951000 audit[1018]: AVC avc: denied { confidentiality } for pid=1018 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:24:59.951000 audit[1018]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=56096c5ff3d0 a1=32194 a2=7fd7e3a46bc5 a3=5 items=106 ppid=1001 pid=1018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:59.951000 audit: CWD cwd="/" Oct 2 19:24:59.951000 audit: PATH item=0 name=(null) inode=13584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=1 name=(null) inode=13585 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=2 name=(null) inode=13584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=3 name=(null) inode=13586 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=4 name=(null) inode=13584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=5 name=(null) inode=13587 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=6 name=(null) inode=13587 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=7 name=(null) inode=13588 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=8 name=(null) inode=13587 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=9 name=(null) inode=13589 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=10 name=(null) inode=13587 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=11 name=(null) inode=13590 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=12 name=(null) inode=13587 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=13 name=(null) inode=13591 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=14 name=(null) inode=13587 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=15 name=(null) inode=13592 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=16 name=(null) inode=13584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=17 name=(null) inode=13593 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=18 name=(null) inode=13593 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=19 name=(null) inode=13594 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=20 name=(null) inode=13593 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=21 name=(null) inode=13595 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=22 name=(null) inode=13593 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=23 name=(null) inode=13596 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=24 name=(null) inode=13593 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=25 name=(null) inode=13597 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=26 name=(null) inode=13593 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=27 name=(null) inode=13598 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=28 name=(null) inode=13584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=29 name=(null) inode=13599 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=30 name=(null) inode=13599 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=31 name=(null) inode=13600 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=32 name=(null) inode=13599 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=33 name=(null) inode=13601 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=34 name=(null) inode=13599 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=35 name=(null) inode=13602 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=36 name=(null) inode=13599 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=37 name=(null) inode=13603 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=38 name=(null) inode=13599 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=39 name=(null) inode=13604 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=40 name=(null) inode=13584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=41 name=(null) inode=13605 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=42 name=(null) inode=13605 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=43 name=(null) inode=13606 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=44 name=(null) inode=13605 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=45 name=(null) inode=13607 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=46 name=(null) inode=13605 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=47 name=(null) inode=13608 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=48 name=(null) inode=13605 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=49 name=(null) inode=13609 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=50 name=(null) inode=13605 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=51 name=(null) inode=13610 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=52 name=(null) inode=44 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=53 name=(null) inode=13611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=54 name=(null) inode=13611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=55 name=(null) inode=13612 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=56 name=(null) inode=13611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=57 name=(null) inode=13613 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=58 name=(null) inode=13611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=59 name=(null) inode=13614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=60 name=(null) inode=13614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=61 name=(null) inode=13615 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=62 name=(null) inode=13614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=63 name=(null) inode=13616 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=64 name=(null) inode=13614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=65 name=(null) inode=13617 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=66 name=(null) inode=13614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=67 name=(null) inode=13618 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=68 name=(null) inode=13614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=69 name=(null) inode=13619 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=70 name=(null) inode=13611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=71 name=(null) inode=13620 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=72 name=(null) inode=13620 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=73 name=(null) inode=13621 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=74 name=(null) inode=13620 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=75 name=(null) inode=13622 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=76 name=(null) inode=13620 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=77 name=(null) inode=13623 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=78 name=(null) inode=13620 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=79 name=(null) inode=13624 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=80 name=(null) inode=13620 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=81 name=(null) inode=13625 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=82 name=(null) inode=13611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=83 name=(null) inode=13626 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=84 name=(null) inode=13626 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=85 name=(null) inode=13627 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=86 name=(null) inode=13626 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=87 name=(null) inode=13628 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=88 name=(null) inode=13626 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=89 name=(null) inode=13629 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=90 name=(null) inode=13626 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=91 name=(null) inode=13630 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=92 name=(null) inode=13626 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=93 name=(null) inode=13631 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=94 name=(null) inode=13611 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=95 name=(null) inode=13632 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=96 name=(null) inode=13632 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=97 name=(null) inode=13633 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=98 name=(null) inode=13632 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=99 name=(null) inode=13634 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=100 name=(null) inode=13632 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=101 name=(null) inode=13635 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=102 name=(null) inode=13632 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=103 name=(null) inode=13636 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=104 name=(null) inode=13632 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PATH item=105 name=(null) inode=13637 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:59.951000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:24:59.977183 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Oct 2 19:24:59.981177 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Oct 2 19:24:59.984185 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:25:00.032521 kernel: kvm: Nested Virtualization enabled Oct 2 19:25:00.032622 kernel: SVM: kvm: Nested Paging enabled Oct 2 19:25:00.047183 kernel: EDAC MC: Ver: 3.0.0 Oct 2 19:25:00.063524 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:25:00.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.065283 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:25:00.078181 lvm[1037]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:25:00.103912 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:25:00.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.104703 systemd[1]: Reached target cryptsetup.target. Oct 2 19:25:00.106281 systemd[1]: Starting lvm2-activation.service... Oct 2 19:25:00.109704 lvm[1038]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:25:00.134687 systemd[1]: Finished lvm2-activation.service. Oct 2 19:25:00.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.152324 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:25:00.152892 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:25:00.152914 systemd[1]: Reached target local-fs.target. Oct 2 19:25:00.153453 systemd[1]: Reached target machines.target. Oct 2 19:25:00.155048 systemd[1]: Starting ldconfig.service... Oct 2 19:25:00.155763 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:25:00.155811 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:25:00.156668 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:25:00.157924 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:25:00.159471 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:25:00.160299 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:25:00.160331 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:25:00.161259 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:25:00.166472 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1040 (bootctl) Oct 2 19:25:00.168239 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:25:00.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.172843 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:25:00.177257 systemd-tmpfiles[1043]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:25:00.180392 systemd-tmpfiles[1043]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:25:00.184019 systemd-tmpfiles[1043]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:25:00.197157 systemd-fsck[1048]: fsck.fat 4.2 (2021-01-31) Oct 2 19:25:00.197157 systemd-fsck[1048]: /dev/vda1: 789 files, 115069/258078 clusters Oct 2 19:25:00.198234 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:25:00.198000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.200274 systemd[1]: Mounting boot.mount... Oct 2 19:25:00.229300 systemd[1]: Mounted boot.mount. Oct 2 19:25:00.239490 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:25:00.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.739997 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:25:00.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.742021 systemd[1]: Starting audit-rules.service... Oct 2 19:25:00.743331 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:25:00.745782 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:25:00.747000 audit: BPF prog-id=27 op=LOAD Oct 2 19:25:00.749000 audit: BPF prog-id=28 op=LOAD Oct 2 19:25:00.748157 systemd[1]: Starting systemd-resolved.service... Oct 2 19:25:00.750828 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:25:00.752619 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:25:00.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.753633 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:25:00.754478 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:25:00.806000 audit[1062]: SYSTEM_BOOT pid=1062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.809615 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:25:01.692489 systemd-timesyncd[1056]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:25:01.692767 systemd-timesyncd[1056]: Initial clock synchronization to Mon 2023-10-02 19:25:01.692411 UTC. Oct 2 19:25:01.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.693302 systemd[1]: Reached target time-set.target. Oct 2 19:25:01.694710 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:25:01.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.696734 systemd-resolved[1055]: Positive Trust Anchors: Oct 2 19:25:01.696745 systemd-resolved[1055]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:25:01.696841 systemd-resolved[1055]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:25:01.714245 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:25:01.714848 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:25:01.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.717045 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:25:01.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.717000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:25:01.717000 audit[1073]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff27e91da0 a2=420 a3=0 items=0 ppid=1051 pid=1073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:01.717000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:25:01.719216 augenrules[1073]: No rules Oct 2 19:25:01.719799 systemd[1]: Finished audit-rules.service. Oct 2 19:25:01.723790 systemd-resolved[1055]: Defaulting to hostname 'linux'. Oct 2 19:25:01.725355 systemd[1]: Started systemd-resolved.service. Oct 2 19:25:01.725967 systemd[1]: Reached target network.target. Oct 2 19:25:01.726514 systemd[1]: Reached target nss-lookup.target. Oct 2 19:25:01.820529 ldconfig[1039]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:25:02.106092 systemd[1]: Finished ldconfig.service. Oct 2 19:25:02.108003 systemd[1]: Starting systemd-update-done.service... Oct 2 19:25:02.114686 systemd[1]: Finished systemd-update-done.service. Oct 2 19:25:02.115479 systemd[1]: Reached target sysinit.target. Oct 2 19:25:02.116106 systemd[1]: Started motdgen.path. Oct 2 19:25:02.116607 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:25:02.117466 systemd[1]: Started logrotate.timer. Oct 2 19:25:02.118076 systemd[1]: Started mdadm.timer. Oct 2 19:25:02.118547 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:25:02.119126 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:25:02.119156 systemd[1]: Reached target paths.target. Oct 2 19:25:02.119662 systemd[1]: Reached target timers.target. Oct 2 19:25:02.120483 systemd[1]: Listening on dbus.socket. Oct 2 19:25:02.122098 systemd[1]: Starting docker.socket... Oct 2 19:25:02.124642 systemd[1]: Listening on sshd.socket. Oct 2 19:25:02.125280 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:25:02.125704 systemd[1]: Listening on docker.socket. Oct 2 19:25:02.126306 systemd[1]: Reached target sockets.target. Oct 2 19:25:02.126830 systemd[1]: Reached target basic.target. Oct 2 19:25:02.127411 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:25:02.127443 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:25:02.128388 systemd[1]: Starting containerd.service... Oct 2 19:25:02.129816 systemd[1]: Starting dbus.service... Oct 2 19:25:02.131056 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:25:02.132588 systemd[1]: Starting extend-filesystems.service... Oct 2 19:25:02.133142 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:25:02.134147 systemd[1]: Starting motdgen.service... Oct 2 19:25:02.135449 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:25:02.137724 systemd[1]: Starting prepare-critools.service... Oct 2 19:25:02.139296 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:25:02.140997 systemd[1]: Starting sshd-keygen.service... Oct 2 19:25:02.143609 jq[1084]: false Oct 2 19:25:02.144181 systemd[1]: Starting systemd-logind.service... Oct 2 19:25:02.144780 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:25:02.144829 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:25:02.145327 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:25:02.146063 systemd[1]: Starting update-engine.service... Oct 2 19:25:02.147642 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:25:02.149906 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:25:02.150088 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:25:02.151573 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:25:02.151724 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:25:02.160686 jq[1097]: true Oct 2 19:25:02.160795 tar[1100]: ./ Oct 2 19:25:02.160795 tar[1100]: ./macvlan Oct 2 19:25:02.164501 dbus-daemon[1083]: [system] SELinux support is enabled Oct 2 19:25:02.164842 jq[1109]: true Oct 2 19:25:02.171724 tar[1101]: crictl Oct 2 19:25:02.172825 extend-filesystems[1085]: Found sr0 Oct 2 19:25:02.173643 extend-filesystems[1085]: Found vda Oct 2 19:25:02.173643 extend-filesystems[1085]: Found vda1 Oct 2 19:25:02.173643 extend-filesystems[1085]: Found vda2 Oct 2 19:25:02.173643 extend-filesystems[1085]: Found vda3 Oct 2 19:25:02.173643 extend-filesystems[1085]: Found usr Oct 2 19:25:02.173643 extend-filesystems[1085]: Found vda4 Oct 2 19:25:02.173643 extend-filesystems[1085]: Found vda6 Oct 2 19:25:02.173643 extend-filesystems[1085]: Found vda7 Oct 2 19:25:02.173643 extend-filesystems[1085]: Found vda9 Oct 2 19:25:02.173643 extend-filesystems[1085]: Checking size of /dev/vda9 Oct 2 19:25:02.175412 systemd[1]: Started dbus.service. Oct 2 19:25:02.178273 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:25:02.178297 systemd[1]: Reached target system-config.target. Oct 2 19:25:02.179017 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:25:02.179034 systemd[1]: Reached target user-config.target. Oct 2 19:25:02.187084 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:25:02.187273 systemd[1]: Finished motdgen.service. Oct 2 19:25:02.208964 bash[1132]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:25:02.209881 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:25:02.215866 extend-filesystems[1085]: Old size kept for /dev/vda9 Oct 2 19:25:02.214793 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:25:02.214991 systemd[1]: Finished extend-filesystems.service. Oct 2 19:25:02.219376 tar[1100]: ./static Oct 2 19:25:02.219989 update_engine[1096]: I1002 19:25:02.219606 1096 main.cc:92] Flatcar Update Engine starting Oct 2 19:25:02.225393 systemd[1]: Started update-engine.service. Oct 2 19:25:02.227216 systemd-logind[1094]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:25:02.227241 systemd-logind[1094]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:25:02.227467 systemd-logind[1094]: New seat seat0. Oct 2 19:25:02.228167 systemd[1]: Started locksmithd.service. Oct 2 19:25:02.230294 update_engine[1096]: I1002 19:25:02.230257 1096 update_check_scheduler.cc:74] Next update check in 5m25s Oct 2 19:25:02.231274 systemd[1]: Started systemd-logind.service. Oct 2 19:25:02.241350 tar[1100]: ./vlan Oct 2 19:25:02.255055 env[1103]: time="2023-10-02T19:25:02.255003448Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:25:02.279374 tar[1100]: ./portmap Oct 2 19:25:02.289830 locksmithd[1136]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:25:02.306968 env[1103]: time="2023-10-02T19:25:02.306905473Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:25:02.307278 env[1103]: time="2023-10-02T19:25:02.307259747Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:25:02.308307 tar[1100]: ./host-local Oct 2 19:25:02.310760 env[1103]: time="2023-10-02T19:25:02.310729164Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:25:02.310858 env[1103]: time="2023-10-02T19:25:02.310836805Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:25:02.311176 env[1103]: time="2023-10-02T19:25:02.311152868Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:25:02.311269 env[1103]: time="2023-10-02T19:25:02.311248257Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:25:02.311369 env[1103]: time="2023-10-02T19:25:02.311345930Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:25:02.311459 env[1103]: time="2023-10-02T19:25:02.311438293Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:25:02.311613 env[1103]: time="2023-10-02T19:25:02.311593464Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:25:02.311914 env[1103]: time="2023-10-02T19:25:02.311894188Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:25:02.312129 env[1103]: time="2023-10-02T19:25:02.312106817Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:25:02.312212 env[1103]: time="2023-10-02T19:25:02.312191115Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:25:02.312358 env[1103]: time="2023-10-02T19:25:02.312325958Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:25:02.312443 env[1103]: time="2023-10-02T19:25:02.312423451Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.319876067Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.319907376Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.319919188Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.319952400Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.319965114Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.319976405Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.319991103Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.320006071Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.320017833Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.320028834Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.320039434Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.320050334Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.320145923Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:25:02.320355 env[1103]: time="2023-10-02T19:25:02.320213059Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.320785112Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.320809828Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.320820579Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.320859812Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.320870442Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.320880902Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.320890169Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.320901310Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.320911790Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.320921758Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.320938961Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.320949911Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.321037435Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.321050620Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.321921 env[1103]: time="2023-10-02T19:25:02.321060428Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.322237 env[1103]: time="2023-10-02T19:25:02.321070016Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:25:02.322237 env[1103]: time="2023-10-02T19:25:02.321082440Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:25:02.322237 env[1103]: time="2023-10-02T19:25:02.321092098Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:25:02.322237 env[1103]: time="2023-10-02T19:25:02.321109871Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:25:02.322237 env[1103]: time="2023-10-02T19:25:02.321139557Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:25:02.322347 env[1103]: time="2023-10-02T19:25:02.321303063Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:25:02.322347 env[1103]: time="2023-10-02T19:25:02.321367164Z" level=info msg="Connect containerd service" Oct 2 19:25:02.322347 env[1103]: time="2023-10-02T19:25:02.321395547Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:25:02.322347 env[1103]: time="2023-10-02T19:25:02.321796419Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:25:02.324770 env[1103]: time="2023-10-02T19:25:02.322514014Z" level=info msg="Start subscribing containerd event" Oct 2 19:25:02.324770 env[1103]: time="2023-10-02T19:25:02.322566403Z" level=info msg="Start recovering state" Oct 2 19:25:02.324770 env[1103]: time="2023-10-02T19:25:02.322631174Z" level=info msg="Start event monitor" Oct 2 19:25:02.324770 env[1103]: time="2023-10-02T19:25:02.322654939Z" level=info msg="Start snapshots syncer" Oct 2 19:25:02.324770 env[1103]: time="2023-10-02T19:25:02.322662403Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:25:02.324770 env[1103]: time="2023-10-02T19:25:02.322669085Z" level=info msg="Start streaming server" Oct 2 19:25:02.324770 env[1103]: time="2023-10-02T19:25:02.322823244Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:25:02.324770 env[1103]: time="2023-10-02T19:25:02.322850606Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:25:02.324770 env[1103]: time="2023-10-02T19:25:02.322942548Z" level=info msg="containerd successfully booted in 0.069970s" Oct 2 19:25:02.323021 systemd[1]: Started containerd.service. Oct 2 19:25:02.339042 tar[1100]: ./vrf Oct 2 19:25:02.367875 tar[1100]: ./bridge Oct 2 19:25:02.400705 tar[1100]: ./tuning Oct 2 19:25:02.427362 tar[1100]: ./firewall Oct 2 19:25:02.461585 tar[1100]: ./host-device Oct 2 19:25:02.491371 tar[1100]: ./sbr Oct 2 19:25:02.518998 tar[1100]: ./loopback Oct 2 19:25:02.546544 tar[1100]: ./dhcp Oct 2 19:25:02.621663 tar[1100]: ./ptp Oct 2 19:25:02.635556 systemd-networkd[1006]: eth0: Gained IPv6LL Oct 2 19:25:02.641576 systemd[1]: Finished prepare-critools.service. Oct 2 19:25:02.652533 tar[1100]: ./ipvlan Oct 2 19:25:02.679379 tar[1100]: ./bandwidth Oct 2 19:25:02.713138 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:25:03.424848 sshd_keygen[1111]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:25:03.441584 systemd[1]: Finished sshd-keygen.service. Oct 2 19:25:03.443513 systemd[1]: Starting issuegen.service... Oct 2 19:25:03.447601 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:25:03.447713 systemd[1]: Finished issuegen.service. Oct 2 19:25:03.449247 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:25:03.453596 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:25:03.455205 systemd[1]: Started getty@tty1.service. Oct 2 19:25:03.456605 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:25:03.457297 systemd[1]: Reached target getty.target. Oct 2 19:25:03.457855 systemd[1]: Reached target multi-user.target. Oct 2 19:25:03.459205 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:25:03.464434 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:25:03.464592 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:25:03.465351 systemd[1]: Startup finished in 505ms (kernel) + 9.081s (initrd) + 5.838s (userspace) = 15.425s. Oct 2 19:25:05.702088 systemd[1]: Created slice system-sshd.slice. Oct 2 19:25:05.702983 systemd[1]: Started sshd@0-10.0.0.11:22-10.0.0.1:51926.service. Oct 2 19:25:05.743356 sshd[1165]: Accepted publickey for core from 10.0.0.1 port 51926 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:05.744635 sshd[1165]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:05.753032 systemd-logind[1094]: New session 1 of user core. Oct 2 19:25:05.754018 systemd[1]: Created slice user-500.slice. Oct 2 19:25:05.755142 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:25:05.762738 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:25:05.764111 systemd[1]: Starting user@500.service... Oct 2 19:25:05.766112 (systemd)[1168]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:05.830153 systemd[1168]: Queued start job for default target default.target. Oct 2 19:25:05.830516 systemd[1168]: Reached target paths.target. Oct 2 19:25:05.830534 systemd[1168]: Reached target sockets.target. Oct 2 19:25:05.830545 systemd[1168]: Reached target timers.target. Oct 2 19:25:05.830555 systemd[1168]: Reached target basic.target. Oct 2 19:25:05.830585 systemd[1168]: Reached target default.target. Oct 2 19:25:05.830604 systemd[1168]: Startup finished in 60ms. Oct 2 19:25:05.830713 systemd[1]: Started user@500.service. Oct 2 19:25:05.831619 systemd[1]: Started session-1.scope. Oct 2 19:25:05.881972 systemd[1]: Started sshd@1-10.0.0.11:22-10.0.0.1:51940.service. Oct 2 19:25:05.916273 sshd[1177]: Accepted publickey for core from 10.0.0.1 port 51940 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:05.917290 sshd[1177]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:05.920446 systemd-logind[1094]: New session 2 of user core. Oct 2 19:25:05.921158 systemd[1]: Started session-2.scope. Oct 2 19:25:05.973199 sshd[1177]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:05.975494 systemd[1]: sshd@1-10.0.0.11:22-10.0.0.1:51940.service: Deactivated successfully. Oct 2 19:25:05.975966 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:25:05.976402 systemd-logind[1094]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:25:05.977409 systemd[1]: Started sshd@2-10.0.0.11:22-10.0.0.1:51944.service. Oct 2 19:25:05.978029 systemd-logind[1094]: Removed session 2. Oct 2 19:25:06.010262 sshd[1183]: Accepted publickey for core from 10.0.0.1 port 51944 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:06.011123 sshd[1183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:06.013771 systemd-logind[1094]: New session 3 of user core. Oct 2 19:25:06.014438 systemd[1]: Started session-3.scope. Oct 2 19:25:06.061842 sshd[1183]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:06.063925 systemd[1]: sshd@2-10.0.0.11:22-10.0.0.1:51944.service: Deactivated successfully. Oct 2 19:25:06.064370 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:25:06.064780 systemd-logind[1094]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:25:06.065455 systemd[1]: Started sshd@3-10.0.0.11:22-10.0.0.1:51958.service. Oct 2 19:25:06.066047 systemd-logind[1094]: Removed session 3. Oct 2 19:25:06.099682 sshd[1189]: Accepted publickey for core from 10.0.0.1 port 51958 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:06.100578 sshd[1189]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:06.103407 systemd-logind[1094]: New session 4 of user core. Oct 2 19:25:06.104183 systemd[1]: Started session-4.scope. Oct 2 19:25:06.155500 sshd[1189]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:06.157887 systemd[1]: sshd@3-10.0.0.11:22-10.0.0.1:51958.service: Deactivated successfully. Oct 2 19:25:06.158351 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:25:06.158781 systemd-logind[1094]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:25:06.159633 systemd[1]: Started sshd@4-10.0.0.11:22-10.0.0.1:51970.service. Oct 2 19:25:06.160215 systemd-logind[1094]: Removed session 4. Oct 2 19:25:06.193022 sshd[1195]: Accepted publickey for core from 10.0.0.1 port 51970 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:06.194124 sshd[1195]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:06.197233 systemd-logind[1094]: New session 5 of user core. Oct 2 19:25:06.197914 systemd[1]: Started session-5.scope. Oct 2 19:25:06.253707 sudo[1198]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:25:06.253876 sudo[1198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:25:06.260514 dbus-daemon[1083]: \xd0\xfd\xa7\xe7xU: received setenforce notice (enforcing=-249459984) Oct 2 19:25:06.262534 sudo[1198]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:06.264201 sshd[1195]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:06.266648 systemd[1]: sshd@4-10.0.0.11:22-10.0.0.1:51970.service: Deactivated successfully. Oct 2 19:25:06.267147 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:25:06.267638 systemd-logind[1094]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:25:06.268548 systemd[1]: Started sshd@5-10.0.0.11:22-10.0.0.1:51982.service. Oct 2 19:25:06.270799 systemd-logind[1094]: Removed session 5. Oct 2 19:25:06.302222 sshd[1202]: Accepted publickey for core from 10.0.0.1 port 51982 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:06.303088 sshd[1202]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:06.306018 systemd-logind[1094]: New session 6 of user core. Oct 2 19:25:06.306771 systemd[1]: Started session-6.scope. Oct 2 19:25:06.357651 sudo[1206]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:25:06.357876 sudo[1206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:25:06.360041 sudo[1206]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:06.363749 sudo[1205]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:25:06.363918 sudo[1205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:25:06.371463 systemd[1]: Stopping audit-rules.service... Oct 2 19:25:06.371000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:25:06.372631 auditctl[1209]: No rules Oct 2 19:25:06.373232 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:25:06.373368 systemd[1]: Stopped audit-rules.service. Oct 2 19:25:06.374345 kernel: kauditd_printk_skb: 230 callbacks suppressed Oct 2 19:25:06.374393 kernel: audit: type=1305 audit(1696274706.371:161): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:25:06.374410 kernel: audit: type=1300 audit(1696274706.371:161): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff2afadce0 a2=420 a3=0 items=0 ppid=1 pid=1209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:06.371000 audit[1209]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff2afadce0 a2=420 a3=0 items=0 ppid=1 pid=1209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:06.374641 systemd[1]: Starting audit-rules.service... Oct 2 19:25:06.371000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:25:06.377857 kernel: audit: type=1327 audit(1696274706.371:161): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:25:06.377885 kernel: audit: type=1131 audit(1696274706.371:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.388796 augenrules[1226]: No rules Oct 2 19:25:06.389322 systemd[1]: Finished audit-rules.service. Oct 2 19:25:06.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.390081 sudo[1205]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:06.391452 sshd[1202]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:06.388000 audit[1205]: USER_END pid=1205 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.394448 kernel: audit: type=1130 audit(1696274706.388:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.394489 kernel: audit: type=1106 audit(1696274706.388:164): pid=1205 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.394505 kernel: audit: type=1104 audit(1696274706.388:165): pid=1205 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.388000 audit[1205]: CRED_DISP pid=1205 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.394183 systemd[1]: Started sshd@6-10.0.0.11:22-10.0.0.1:51992.service. Oct 2 19:25:06.394674 systemd[1]: sshd@5-10.0.0.11:22-10.0.0.1:51982.service: Deactivated successfully. Oct 2 19:25:06.395318 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:25:06.395903 kernel: audit: type=1106 audit(1696274706.391:166): pid=1202 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:06.391000 audit[1202]: USER_END pid=1202 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:06.395927 systemd-logind[1094]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:25:06.396776 systemd-logind[1094]: Removed session 6. Oct 2 19:25:06.391000 audit[1202]: CRED_DISP pid=1202 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:06.400644 kernel: audit: type=1104 audit(1696274706.391:167): pid=1202 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:06.400669 kernel: audit: type=1130 audit(1696274706.393:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.11:22-10.0.0.1:51992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.11:22-10.0.0.1:51992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.11:22-10.0.0.1:51982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.427000 audit[1231]: USER_ACCT pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:06.429084 sshd[1231]: Accepted publickey for core from 10.0.0.1 port 51992 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:06.428000 audit[1231]: CRED_ACQ pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:06.428000 audit[1231]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff82341ce0 a2=3 a3=0 items=0 ppid=1 pid=1231 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:06.428000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:06.430155 sshd[1231]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:06.433154 systemd-logind[1094]: New session 7 of user core. Oct 2 19:25:06.433862 systemd[1]: Started session-7.scope. Oct 2 19:25:06.435000 audit[1231]: USER_START pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:06.436000 audit[1234]: CRED_ACQ pid=1234 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:06.482000 audit[1235]: USER_ACCT pid=1235 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.483919 sudo[1235]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:25:06.482000 audit[1235]: CRED_REFR pid=1235 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:06.484080 sudo[1235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:25:06.484000 audit[1235]: USER_START pid=1235 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:07.001822 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:25:07.007038 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:25:07.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:07.007285 systemd[1]: Reached target network-online.target. Oct 2 19:25:07.008254 systemd[1]: Starting docker.service... Oct 2 19:25:07.039366 env[1253]: time="2023-10-02T19:25:07.039303498Z" level=info msg="Starting up" Oct 2 19:25:07.040773 env[1253]: time="2023-10-02T19:25:07.040742156Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:25:07.040773 env[1253]: time="2023-10-02T19:25:07.040767995Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:25:07.040845 env[1253]: time="2023-10-02T19:25:07.040788153Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:25:07.040845 env[1253]: time="2023-10-02T19:25:07.040802860Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:25:07.042114 env[1253]: time="2023-10-02T19:25:07.042086377Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:25:07.042114 env[1253]: time="2023-10-02T19:25:07.042104301Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:25:07.042182 env[1253]: time="2023-10-02T19:25:07.042117736Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:25:07.042182 env[1253]: time="2023-10-02T19:25:07.042126673Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:25:08.606026 env[1253]: time="2023-10-02T19:25:08.605975107Z" level=info msg="Loading containers: start." Oct 2 19:25:08.643000 audit[1289]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.643000 audit[1289]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe28dbbc30 a2=0 a3=7ffe28dbbc1c items=0 ppid=1253 pid=1289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.643000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:25:08.645000 audit[1291]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.645000 audit[1291]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff67331b80 a2=0 a3=7fff67331b6c items=0 ppid=1253 pid=1291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.645000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:25:08.646000 audit[1293]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.646000 audit[1293]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe4267a1e0 a2=0 a3=7ffe4267a1cc items=0 ppid=1253 pid=1293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.646000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:25:08.648000 audit[1295]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.648000 audit[1295]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff80372b30 a2=0 a3=7fff80372b1c items=0 ppid=1253 pid=1295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.648000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:25:08.649000 audit[1297]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.649000 audit[1297]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe4f670f00 a2=0 a3=7ffe4f670eec items=0 ppid=1253 pid=1297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.649000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:25:08.663000 audit[1302]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.663000 audit[1302]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc55db7470 a2=0 a3=7ffc55db745c items=0 ppid=1253 pid=1302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.663000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:25:08.671000 audit[1304]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.671000 audit[1304]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe1bd4d4f0 a2=0 a3=7ffe1bd4d4dc items=0 ppid=1253 pid=1304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.671000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:25:08.673000 audit[1306]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.673000 audit[1306]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffec22ec910 a2=0 a3=7ffec22ec8fc items=0 ppid=1253 pid=1306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.673000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:25:08.674000 audit[1308]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.674000 audit[1308]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff277559d0 a2=0 a3=7fff277559bc items=0 ppid=1253 pid=1308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.674000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:08.685000 audit[1313]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.685000 audit[1313]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe6376fe10 a2=0 a3=7ffe6376fdfc items=0 ppid=1253 pid=1313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.685000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:08.685000 audit[1314]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.685000 audit[1314]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcc5b33740 a2=0 a3=7ffcc5b3372c items=0 ppid=1253 pid=1314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.685000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:08.693365 kernel: Initializing XFRM netlink socket Oct 2 19:25:08.728773 env[1253]: time="2023-10-02T19:25:08.728724185Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:25:08.742000 audit[1322]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.742000 audit[1322]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffed37863d0 a2=0 a3=7ffed37863bc items=0 ppid=1253 pid=1322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.742000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:25:08.752000 audit[1325]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.752000 audit[1325]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffcba174db0 a2=0 a3=7ffcba174d9c items=0 ppid=1253 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.752000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:25:08.754000 audit[1328]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.754000 audit[1328]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffe1b03d30 a2=0 a3=7fffe1b03d1c items=0 ppid=1253 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.754000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:25:08.756000 audit[1330]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.756000 audit[1330]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc1d050510 a2=0 a3=7ffc1d0504fc items=0 ppid=1253 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.756000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:25:08.758000 audit[1332]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.758000 audit[1332]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fff42f3d880 a2=0 a3=7fff42f3d86c items=0 ppid=1253 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.758000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:25:08.759000 audit[1334]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.759000 audit[1334]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc72397a10 a2=0 a3=7ffc723979fc items=0 ppid=1253 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.759000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:25:08.760000 audit[1336]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.760000 audit[1336]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffcc29852b0 a2=0 a3=7ffcc298529c items=0 ppid=1253 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.760000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:25:08.767000 audit[1339]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.767000 audit[1339]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc7f86f8b0 a2=0 a3=7ffc7f86f89c items=0 ppid=1253 pid=1339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.767000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:25:08.769000 audit[1341]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1341 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.769000 audit[1341]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffc4a9b16d0 a2=0 a3=7ffc4a9b16bc items=0 ppid=1253 pid=1341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.769000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:25:08.770000 audit[1343]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.770000 audit[1343]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff37a14a70 a2=0 a3=7fff37a14a5c items=0 ppid=1253 pid=1343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.770000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:25:08.771000 audit[1345]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.771000 audit[1345]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe01bc4e70 a2=0 a3=7ffe01bc4e5c items=0 ppid=1253 pid=1345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.771000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:25:08.773449 systemd-networkd[1006]: docker0: Link UP Oct 2 19:25:08.780000 audit[1349]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1349 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.780000 audit[1349]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc0e3d2dd0 a2=0 a3=7ffc0e3d2dbc items=0 ppid=1253 pid=1349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.780000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:08.781000 audit[1350]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1350 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:08.781000 audit[1350]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd9805fd90 a2=0 a3=7ffd9805fd7c items=0 ppid=1253 pid=1350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.781000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:08.782809 env[1253]: time="2023-10-02T19:25:08.782774940Z" level=info msg="Loading containers: done." Oct 2 19:25:08.794591 env[1253]: time="2023-10-02T19:25:08.794536567Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:25:08.794795 env[1253]: time="2023-10-02T19:25:08.794721904Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:25:08.794847 env[1253]: time="2023-10-02T19:25:08.794813857Z" level=info msg="Daemon has completed initialization" Oct 2 19:25:08.809450 systemd[1]: Started docker.service. Oct 2 19:25:08.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:08.812797 env[1253]: time="2023-10-02T19:25:08.812750324Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:25:08.828178 systemd[1]: Reloading. Oct 2 19:25:08.883483 /usr/lib/systemd/system-generators/torcx-generator[1400]: time="2023-10-02T19:25:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:25:08.883509 /usr/lib/systemd/system-generators/torcx-generator[1400]: time="2023-10-02T19:25:08Z" level=info msg="torcx already run" Oct 2 19:25:08.942169 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:25:08.942184 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:25:08.958166 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit: BPF prog-id=34 op=LOAD Oct 2 19:25:09.012000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit: BPF prog-id=35 op=LOAD Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.012000 audit: BPF prog-id=36 op=LOAD Oct 2 19:25:09.012000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:25:09.012000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit: BPF prog-id=37 op=LOAD Oct 2 19:25:09.013000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit: BPF prog-id=38 op=LOAD Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.013000 audit: BPF prog-id=39 op=LOAD Oct 2 19:25:09.013000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:25:09.013000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:25:09.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.014000 audit: BPF prog-id=40 op=LOAD Oct 2 19:25:09.014000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit: BPF prog-id=41 op=LOAD Oct 2 19:25:09.015000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit: BPF prog-id=42 op=LOAD Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.015000 audit: BPF prog-id=43 op=LOAD Oct 2 19:25:09.015000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:25:09.016000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit: BPF prog-id=44 op=LOAD Oct 2 19:25:09.016000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit: BPF prog-id=45 op=LOAD Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.016000 audit: BPF prog-id=46 op=LOAD Oct 2 19:25:09.016000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:25:09.016000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:25:09.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.018000 audit: BPF prog-id=47 op=LOAD Oct 2 19:25:09.018000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:25:09.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.019000 audit: BPF prog-id=48 op=LOAD Oct 2 19:25:09.019000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:25:09.026269 systemd[1]: Started kubelet.service. Oct 2 19:25:09.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:09.062419 kubelet[1438]: E1002 19:25:09.062357 1438 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:25:09.064314 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:25:09.064430 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:25:09.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:09.363904 env[1103]: time="2023-10-02T19:25:09.363766937Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:25:10.189133 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount519894451.mount: Deactivated successfully. Oct 2 19:25:12.061406 env[1103]: time="2023-10-02T19:25:12.061342825Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:12.064930 env[1103]: time="2023-10-02T19:25:12.064869839Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:12.067080 env[1103]: time="2023-10-02T19:25:12.067046952Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:12.069040 env[1103]: time="2023-10-02T19:25:12.068986489Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:12.069759 env[1103]: time="2023-10-02T19:25:12.069725385Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2\"" Oct 2 19:25:12.079175 env[1103]: time="2023-10-02T19:25:12.079132366Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:25:14.395483 env[1103]: time="2023-10-02T19:25:14.395422497Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:14.397325 env[1103]: time="2023-10-02T19:25:14.397295600Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:14.399119 env[1103]: time="2023-10-02T19:25:14.399083313Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:14.400743 env[1103]: time="2023-10-02T19:25:14.400718830Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:14.401315 env[1103]: time="2023-10-02T19:25:14.401292375Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c\"" Oct 2 19:25:14.410266 env[1103]: time="2023-10-02T19:25:14.410229375Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:25:16.183198 env[1103]: time="2023-10-02T19:25:16.183133213Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:16.185518 env[1103]: time="2023-10-02T19:25:16.185482048Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:16.187435 env[1103]: time="2023-10-02T19:25:16.187398081Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:16.189298 env[1103]: time="2023-10-02T19:25:16.189255114Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:16.189845 env[1103]: time="2023-10-02T19:25:16.189810395Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999\"" Oct 2 19:25:16.198060 env[1103]: time="2023-10-02T19:25:16.198027265Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:25:18.197275 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount496469193.mount: Deactivated successfully. Oct 2 19:25:19.222497 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:25:19.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.222677 systemd[1]: Stopped kubelet.service. Oct 2 19:25:19.223817 systemd[1]: Started kubelet.service. Oct 2 19:25:19.225108 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:25:19.225152 kernel: audit: type=1130 audit(1696274719.221:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.225169 kernel: audit: type=1131 audit(1696274719.221:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.228912 kernel: audit: type=1130 audit(1696274719.222:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.258853 kubelet[1479]: E1002 19:25:19.258783 1479 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:25:19.261949 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:25:19.262076 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:25:19.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:19.264366 kernel: audit: type=1131 audit(1696274719.260:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:19.343363 env[1103]: time="2023-10-02T19:25:19.342615941Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:19.344379 env[1103]: time="2023-10-02T19:25:19.344353249Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:19.346014 env[1103]: time="2023-10-02T19:25:19.345995499Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:19.347589 env[1103]: time="2023-10-02T19:25:19.347557768Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:19.347933 env[1103]: time="2023-10-02T19:25:19.347902605Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 19:25:19.355925 env[1103]: time="2023-10-02T19:25:19.355882590Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:25:20.764694 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount11822444.mount: Deactivated successfully. Oct 2 19:25:20.770788 env[1103]: time="2023-10-02T19:25:20.770729373Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:20.772824 env[1103]: time="2023-10-02T19:25:20.772795498Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:20.774530 env[1103]: time="2023-10-02T19:25:20.774495105Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:20.775997 env[1103]: time="2023-10-02T19:25:20.775961966Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:20.776388 env[1103]: time="2023-10-02T19:25:20.776361826Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:25:20.784836 env[1103]: time="2023-10-02T19:25:20.784799770Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:25:21.744272 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1250004106.mount: Deactivated successfully. Oct 2 19:25:26.650213 env[1103]: time="2023-10-02T19:25:26.650144615Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:26.653417 env[1103]: time="2023-10-02T19:25:26.653377438Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:26.655540 env[1103]: time="2023-10-02T19:25:26.655493366Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:26.657072 env[1103]: time="2023-10-02T19:25:26.657038995Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:26.657571 env[1103]: time="2023-10-02T19:25:26.657538081Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:25:26.666573 env[1103]: time="2023-10-02T19:25:26.666532368Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:25:27.700808 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3842364966.mount: Deactivated successfully. Oct 2 19:25:29.472518 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:25:29.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:29.472698 systemd[1]: Stopped kubelet.service. Oct 2 19:25:29.473933 systemd[1]: Started kubelet.service. Oct 2 19:25:29.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:29.476837 kernel: audit: type=1130 audit(1696274729.471:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:29.476953 kernel: audit: type=1131 audit(1696274729.471:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:29.476973 kernel: audit: type=1130 audit(1696274729.472:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:29.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:29.514042 kubelet[1506]: E1002 19:25:29.513993 1506 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:25:29.516113 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:25:29.516242 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:25:29.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:29.569351 kernel: audit: type=1131 audit(1696274729.515:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:29.954916 env[1103]: time="2023-10-02T19:25:29.954783082Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:29.956825 env[1103]: time="2023-10-02T19:25:29.956780588Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:29.958331 env[1103]: time="2023-10-02T19:25:29.958280551Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:29.959715 env[1103]: time="2023-10-02T19:25:29.959686879Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:29.960121 env[1103]: time="2023-10-02T19:25:29.960091668Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:25:31.771179 systemd[1]: Stopped kubelet.service. Oct 2 19:25:31.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:31.773361 kernel: audit: type=1130 audit(1696274731.770:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:31.773409 kernel: audit: type=1131 audit(1696274731.770:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:31.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:31.785195 systemd[1]: Reloading. Oct 2 19:25:31.839209 /usr/lib/systemd/system-generators/torcx-generator[1609]: time="2023-10-02T19:25:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:25:31.839545 /usr/lib/systemd/system-generators/torcx-generator[1609]: time="2023-10-02T19:25:31Z" level=info msg="torcx already run" Oct 2 19:25:31.897890 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:25:31.897905 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:25:31.913977 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:25:31.976408 kernel: audit: type=1400 audit(1696274731.967:388): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976524 kernel: audit: type=1400 audit(1696274731.967:389): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976541 kernel: audit: type=1400 audit(1696274731.967:390): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976557 kernel: audit: type=1400 audit(1696274731.967:391): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.971000 audit: BPF prog-id=49 op=LOAD Oct 2 19:25:31.971000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:25:31.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.974000 audit: BPF prog-id=50 op=LOAD Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit: BPF prog-id=51 op=LOAD Oct 2 19:25:31.975000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:25:31.975000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit: BPF prog-id=52 op=LOAD Oct 2 19:25:31.975000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit: BPF prog-id=53 op=LOAD Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.975000 audit: BPF prog-id=54 op=LOAD Oct 2 19:25:31.975000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:25:31.975000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:25:31.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.976000 audit: BPF prog-id=55 op=LOAD Oct 2 19:25:31.976000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:25:31.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.977000 audit: BPF prog-id=56 op=LOAD Oct 2 19:25:31.977000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:25:31.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit: BPF prog-id=57 op=LOAD Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit: BPF prog-id=58 op=LOAD Oct 2 19:25:31.978000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:25:31.978000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit: BPF prog-id=59 op=LOAD Oct 2 19:25:31.978000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit: BPF prog-id=60 op=LOAD Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.979000 audit: BPF prog-id=61 op=LOAD Oct 2 19:25:31.979000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:25:31.979000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:25:31.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.980000 audit: BPF prog-id=62 op=LOAD Oct 2 19:25:31.980000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:25:31.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:31.981000 audit: BPF prog-id=63 op=LOAD Oct 2 19:25:31.981000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:25:31.992608 systemd[1]: Started kubelet.service. Oct 2 19:25:31.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.031112 kubelet[1650]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:25:32.031112 kubelet[1650]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:25:32.031353 kubelet[1650]: I1002 19:25:32.031112 1650 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:25:32.032379 kubelet[1650]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:25:32.032379 kubelet[1650]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:25:32.259534 kubelet[1650]: I1002 19:25:32.259491 1650 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:25:32.259534 kubelet[1650]: I1002 19:25:32.259524 1650 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:25:32.259780 kubelet[1650]: I1002 19:25:32.259766 1650 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:25:32.262956 kubelet[1650]: I1002 19:25:32.262918 1650 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:25:32.263220 kubelet[1650]: E1002 19:25:32.263198 1650 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.11:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:32.267130 kubelet[1650]: I1002 19:25:32.267109 1650 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:25:32.267359 kubelet[1650]: I1002 19:25:32.267320 1650 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:25:32.267432 kubelet[1650]: I1002 19:25:32.267412 1650 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:25:32.267515 kubelet[1650]: I1002 19:25:32.267440 1650 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:25:32.267515 kubelet[1650]: I1002 19:25:32.267453 1650 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:25:32.267566 kubelet[1650]: I1002 19:25:32.267543 1650 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:25:32.270134 kubelet[1650]: I1002 19:25:32.270122 1650 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:25:32.270196 kubelet[1650]: I1002 19:25:32.270139 1650 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:25:32.270196 kubelet[1650]: I1002 19:25:32.270156 1650 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:25:32.270196 kubelet[1650]: I1002 19:25:32.270168 1650 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:25:32.272348 kubelet[1650]: W1002 19:25:32.272278 1650 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.11:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:32.272407 kubelet[1650]: E1002 19:25:32.272394 1650 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.11:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:32.272434 kubelet[1650]: W1002 19:25:32.272298 1650 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.11:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:32.272464 kubelet[1650]: E1002 19:25:32.272440 1650 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.11:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:32.272945 kubelet[1650]: I1002 19:25:32.272919 1650 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:25:32.273320 kubelet[1650]: W1002 19:25:32.273306 1650 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:25:32.273681 kubelet[1650]: I1002 19:25:32.273661 1650 server.go:1186] "Started kubelet" Oct 2 19:25:32.273951 kubelet[1650]: I1002 19:25:32.273913 1650 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:25:32.274703 kubelet[1650]: I1002 19:25:32.274682 1650 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:25:32.273000 audit[1650]: AVC avc: denied { mac_admin } for pid=1650 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.273000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:25:32.273000 audit[1650]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e9afc0 a1=c001024a80 a2=c000e9af90 a3=25 items=0 ppid=1 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.273000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:25:32.273000 audit[1650]: AVC avc: denied { mac_admin } for pid=1650 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.273000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:25:32.273000 audit[1650]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000365a80 a1=c001024a98 a2=c000e9b050 a3=25 items=0 ppid=1 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.273000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:25:32.275485 kubelet[1650]: I1002 19:25:32.275160 1650 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:25:32.275485 kubelet[1650]: I1002 19:25:32.275212 1650 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:25:32.275485 kubelet[1650]: I1002 19:25:32.275265 1650 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:25:32.275854 kubelet[1650]: E1002 19:25:32.275700 1650 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:25:32.275854 kubelet[1650]: I1002 19:25:32.275731 1650 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:25:32.275854 kubelet[1650]: I1002 19:25:32.275786 1650 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:25:32.276508 kubelet[1650]: E1002 19:25:32.276330 1650 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.0.0.11:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:32.276508 kubelet[1650]: W1002 19:25:32.276420 1650 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.11:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:32.276508 kubelet[1650]: E1002 19:25:32.276450 1650 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.11:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:32.276619 kubelet[1650]: E1002 19:25:32.276446 1650 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a60e1baa42ce2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 273642722, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 273642722, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.11:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.11:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:25:32.276619 kubelet[1650]: E1002 19:25:32.276580 1650 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:25:32.276619 kubelet[1650]: E1002 19:25:32.276597 1650 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:25:32.275000 audit[1662]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1662 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.275000 audit[1662]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffccf191720 a2=0 a3=7ffccf19170c items=0 ppid=1650 pid=1662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.275000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:25:32.277000 audit[1663]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1663 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.277000 audit[1663]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffc7de2320 a2=0 a3=7fffc7de230c items=0 ppid=1650 pid=1663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.277000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:25:32.278000 audit[1665]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1665 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.278000 audit[1665]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd09497160 a2=0 a3=7ffd0949714c items=0 ppid=1650 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.278000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:25:32.279000 audit[1667]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1667 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.279000 audit[1667]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc021910d0 a2=0 a3=7ffc021910bc items=0 ppid=1650 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.279000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:25:32.283000 audit[1670]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1670 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.283000 audit[1670]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd3c6b1bf0 a2=0 a3=7ffd3c6b1bdc items=0 ppid=1650 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.283000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:25:32.283000 audit[1671]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=1671 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.283000 audit[1671]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffea930f2b0 a2=0 a3=7ffea930f29c items=0 ppid=1650 pid=1671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.283000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:25:32.287000 audit[1676]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=1676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.287000 audit[1676]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffeb0519230 a2=0 a3=7ffeb051921c items=0 ppid=1650 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.287000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:25:32.290000 audit[1681]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.290000 audit[1681]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffc06303740 a2=0 a3=7ffc0630372c items=0 ppid=1650 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.290000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:25:32.292486 kubelet[1650]: I1002 19:25:32.292468 1650 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:25:32.292486 kubelet[1650]: I1002 19:25:32.292486 1650 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:25:32.292578 kubelet[1650]: I1002 19:25:32.292498 1650 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:25:32.291000 audit[1682]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.291000 audit[1682]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc917f44f0 a2=0 a3=7ffc917f44dc items=0 ppid=1650 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.291000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:25:32.292000 audit[1685]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.292000 audit[1685]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe71d90a20 a2=0 a3=7ffe71d90a0c items=0 ppid=1650 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.292000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:25:32.293000 audit[1687]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=1687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.293000 audit[1687]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe389524a0 a2=0 a3=7ffe3895248c items=0 ppid=1650 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.293000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:25:32.295000 audit[1689]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=1689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.295000 audit[1689]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc76e94630 a2=0 a3=7ffc76e9461c items=0 ppid=1650 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.295000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:25:32.296000 audit[1691]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=1691 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.296000 audit[1691]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffeba884e40 a2=0 a3=7ffeba884e2c items=0 ppid=1650 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.296000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:25:32.298000 audit[1693]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=1693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.298000 audit[1693]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fffca8e0a70 a2=0 a3=7fffca8e0a5c items=0 ppid=1650 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.298000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:25:32.300000 audit[1695]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=1695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.300000 audit[1695]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffc32a3b740 a2=0 a3=7ffc32a3b72c items=0 ppid=1650 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.300000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:25:32.301551 kubelet[1650]: I1002 19:25:32.301502 1650 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:25:32.300000 audit[1696]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=1696 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.300000 audit[1696]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe90f7e8f0 a2=0 a3=7ffe90f7e8dc items=0 ppid=1650 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.300000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:25:32.300000 audit[1697]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=1697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.300000 audit[1697]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd8a4f130 a2=0 a3=7fffd8a4f11c items=0 ppid=1650 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.300000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:25:32.301000 audit[1698]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.301000 audit[1698]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffedf47f6f0 a2=0 a3=7ffedf47f6dc items=0 ppid=1650 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.301000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:25:32.301000 audit[1699]: NETFILTER_CFG table=nat:44 family=10 entries=2 op=nft_register_chain pid=1699 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.301000 audit[1699]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc1b9e63d0 a2=0 a3=7ffc1b9e63bc items=0 ppid=1650 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.301000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:25:32.302000 audit[1700]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=1700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:32.302000 audit[1700]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd32a09fd0 a2=0 a3=7ffd32a09fbc items=0 ppid=1650 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.302000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:25:32.303000 audit[1702]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=1702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.303000 audit[1702]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd64714f80 a2=0 a3=7ffd64714f6c items=0 ppid=1650 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.303000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:25:32.304000 audit[1703]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=1703 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.304000 audit[1703]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffe71287980 a2=0 a3=7ffe7128796c items=0 ppid=1650 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.304000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:25:32.305000 audit[1705]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=1705 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.305000 audit[1705]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7fff5e83f460 a2=0 a3=7fff5e83f44c items=0 ppid=1650 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.305000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:25:32.306000 audit[1706]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=1706 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.306000 audit[1706]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff829103c0 a2=0 a3=7fff829103ac items=0 ppid=1650 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.306000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:25:32.307000 audit[1707]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=1707 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.307000 audit[1707]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffdd8ee4a0 a2=0 a3=7fffdd8ee48c items=0 ppid=1650 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.307000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:25:32.308000 audit[1709]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=1709 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.308000 audit[1709]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd4c4bda90 a2=0 a3=7ffd4c4bda7c items=0 ppid=1650 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.308000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:25:32.310000 audit[1712]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=1712 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.310000 audit[1712]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc5cb0aa40 a2=0 a3=7ffc5cb0aa2c items=0 ppid=1650 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.310000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:25:32.311000 audit[1714]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=1714 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.311000 audit[1714]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffe368e9050 a2=0 a3=7ffe368e903c items=0 ppid=1650 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.311000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:25:32.313000 audit[1716]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=1716 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.313000 audit[1716]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffe7a76b490 a2=0 a3=7ffe7a76b47c items=0 ppid=1650 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.313000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:25:32.329997 kubelet[1650]: I1002 19:25:32.329979 1650 policy_none.go:49] "None policy: Start" Oct 2 19:25:32.328000 audit[1718]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=1718 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.328000 audit[1718]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffcd44c0ea0 a2=0 a3=7ffcd44c0e8c items=0 ppid=1650 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.328000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:25:32.330612 kubelet[1650]: I1002 19:25:32.330598 1650 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:25:32.330698 kubelet[1650]: I1002 19:25:32.330665 1650 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:25:32.330740 kubelet[1650]: I1002 19:25:32.330702 1650 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:25:32.330836 kubelet[1650]: I1002 19:25:32.330670 1650 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:25:32.330879 kubelet[1650]: I1002 19:25:32.330846 1650 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:25:32.330906 kubelet[1650]: E1002 19:25:32.330886 1650 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:25:32.331370 kubelet[1650]: W1002 19:25:32.331327 1650 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.11:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:32.330000 audit[1719]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=1719 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.330000 audit[1719]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd9ab5c9e0 a2=0 a3=7ffd9ab5c9cc items=0 ppid=1650 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.330000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:25:32.331657 kubelet[1650]: E1002 19:25:32.331435 1650 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.11:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:32.330000 audit[1720]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=1720 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.330000 audit[1720]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff46c7d4e0 a2=0 a3=7fff46c7d4cc items=0 ppid=1650 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.330000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:25:32.331000 audit[1721]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1721 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:32.331000 audit[1721]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd7de0dc90 a2=0 a3=7ffd7de0dc7c items=0 ppid=1650 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.331000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:25:32.336592 systemd[1]: Created slice kubepods.slice. Oct 2 19:25:32.340057 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:25:32.342220 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:25:32.350886 kubelet[1650]: I1002 19:25:32.350867 1650 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:25:32.349000 audit[1650]: AVC avc: denied { mac_admin } for pid=1650 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.349000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:25:32.349000 audit[1650]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e62a80 a1=c000f48168 a2=c000e62a50 a3=25 items=0 ppid=1 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.349000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:25:32.351324 kubelet[1650]: I1002 19:25:32.350929 1650 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:25:32.351324 kubelet[1650]: I1002 19:25:32.351066 1650 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:25:32.351472 kubelet[1650]: E1002 19:25:32.351436 1650 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:25:32.377099 kubelet[1650]: I1002 19:25:32.377077 1650 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:32.377392 kubelet[1650]: E1002 19:25:32.377381 1650 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.11:6443/api/v1/nodes\": dial tcp 10.0.0.11:6443: connect: connection refused" node="localhost" Oct 2 19:25:32.431563 kubelet[1650]: I1002 19:25:32.431518 1650 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:25:32.434097 kubelet[1650]: I1002 19:25:32.434075 1650 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:25:32.435034 kubelet[1650]: I1002 19:25:32.435011 1650 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:25:32.435474 kubelet[1650]: I1002 19:25:32.435454 1650 status_manager.go:698] "Failed to get status for pod" podUID=b3fbb6a05b0456c4809ee638aa5cfabe pod="kube-system/kube-controller-manager-localhost" err="Get \"https://10.0.0.11:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-localhost\": dial tcp 10.0.0.11:6443: connect: connection refused" Oct 2 19:25:32.436964 kubelet[1650]: I1002 19:25:32.436941 1650 status_manager.go:698] "Failed to get status for pod" podUID=fbbee22b6941d370b4e7de3cf42df07f pod="kube-system/kube-scheduler-localhost" err="Get \"https://10.0.0.11:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-localhost\": dial tcp 10.0.0.11:6443: connect: connection refused" Oct 2 19:25:32.437180 kubelet[1650]: I1002 19:25:32.437163 1650 status_manager.go:698] "Failed to get status for pod" podUID=e2803e1b862ab492426e2c33273b6ccb pod="kube-system/kube-apiserver-localhost" err="Get \"https://10.0.0.11:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-localhost\": dial tcp 10.0.0.11:6443: connect: connection refused" Oct 2 19:25:32.439057 systemd[1]: Created slice kubepods-burstable-podb3fbb6a05b0456c4809ee638aa5cfabe.slice. Oct 2 19:25:32.454980 systemd[1]: Created slice kubepods-burstable-podfbbee22b6941d370b4e7de3cf42df07f.slice. Oct 2 19:25:32.462990 systemd[1]: Created slice kubepods-burstable-pode2803e1b862ab492426e2c33273b6ccb.slice. Oct 2 19:25:32.477240 kubelet[1650]: I1002 19:25:32.477224 1650 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:32.477301 kubelet[1650]: I1002 19:25:32.477255 1650 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:32.477301 kubelet[1650]: I1002 19:25:32.477275 1650 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:32.477301 kubelet[1650]: I1002 19:25:32.477300 1650 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e2803e1b862ab492426e2c33273b6ccb-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"e2803e1b862ab492426e2c33273b6ccb\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:32.477417 kubelet[1650]: I1002 19:25:32.477327 1650 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e2803e1b862ab492426e2c33273b6ccb-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"e2803e1b862ab492426e2c33273b6ccb\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:32.477417 kubelet[1650]: I1002 19:25:32.477357 1650 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:32.477417 kubelet[1650]: I1002 19:25:32.477376 1650 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:32.477484 kubelet[1650]: I1002 19:25:32.477426 1650 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:25:32.477484 kubelet[1650]: I1002 19:25:32.477455 1650 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e2803e1b862ab492426e2c33273b6ccb-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"e2803e1b862ab492426e2c33273b6ccb\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:32.477647 kubelet[1650]: E1002 19:25:32.477609 1650 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.0.0.11:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:32.578867 kubelet[1650]: I1002 19:25:32.578767 1650 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:32.579283 kubelet[1650]: E1002 19:25:32.579264 1650 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.11:6443/api/v1/nodes\": dial tcp 10.0.0.11:6443: connect: connection refused" node="localhost" Oct 2 19:25:32.754031 kubelet[1650]: E1002 19:25:32.753999 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:32.754650 env[1103]: time="2023-10-02T19:25:32.754611229Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,}" Oct 2 19:25:32.761726 kubelet[1650]: E1002 19:25:32.761714 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:32.762146 env[1103]: time="2023-10-02T19:25:32.762104432Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,}" Oct 2 19:25:32.764350 kubelet[1650]: E1002 19:25:32.764316 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:32.764683 env[1103]: time="2023-10-02T19:25:32.764662158Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:e2803e1b862ab492426e2c33273b6ccb,Namespace:kube-system,Attempt:0,}" Oct 2 19:25:32.878803 kubelet[1650]: E1002 19:25:32.878688 1650 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.0.0.11:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:32.980804 kubelet[1650]: I1002 19:25:32.980779 1650 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:32.981045 kubelet[1650]: E1002 19:25:32.981032 1650 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.11:6443/api/v1/nodes\": dial tcp 10.0.0.11:6443: connect: connection refused" node="localhost" Oct 2 19:25:33.411723 kubelet[1650]: W1002 19:25:33.411657 1650 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.11:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:33.411723 kubelet[1650]: E1002 19:25:33.411704 1650 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.11:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:33.679992 kubelet[1650]: E1002 19:25:33.679880 1650 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.0.0.11:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:33.739355 kubelet[1650]: W1002 19:25:33.739308 1650 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.11:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:33.739417 kubelet[1650]: E1002 19:25:33.739363 1650 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.11:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:33.782470 kubelet[1650]: I1002 19:25:33.782444 1650 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:33.782665 kubelet[1650]: E1002 19:25:33.782643 1650 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.11:6443/api/v1/nodes\": dial tcp 10.0.0.11:6443: connect: connection refused" node="localhost" Oct 2 19:25:33.820107 kubelet[1650]: W1002 19:25:33.820058 1650 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.11:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:33.820107 kubelet[1650]: E1002 19:25:33.820097 1650 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.11:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:33.835362 kubelet[1650]: W1002 19:25:33.835304 1650 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.11:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:33.835362 kubelet[1650]: E1002 19:25:33.835351 1650 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.11:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:34.363972 kubelet[1650]: E1002 19:25:34.363945 1650 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.11:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:35.079612 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2761290338.mount: Deactivated successfully. Oct 2 19:25:35.087164 env[1103]: time="2023-10-02T19:25:35.087122372Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:35.088894 env[1103]: time="2023-10-02T19:25:35.088854053Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:35.089711 env[1103]: time="2023-10-02T19:25:35.089688928Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:35.091420 env[1103]: time="2023-10-02T19:25:35.091386575Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:35.093102 env[1103]: time="2023-10-02T19:25:35.093059223Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:35.094013 env[1103]: time="2023-10-02T19:25:35.093984813Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:35.095177 env[1103]: time="2023-10-02T19:25:35.095142150Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:35.096127 env[1103]: time="2023-10-02T19:25:35.096097768Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:35.097393 env[1103]: time="2023-10-02T19:25:35.097366529Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:35.099927 env[1103]: time="2023-10-02T19:25:35.099891075Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:35.102442 env[1103]: time="2023-10-02T19:25:35.102400713Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:35.104892 env[1103]: time="2023-10-02T19:25:35.104865314Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:35.122724 env[1103]: time="2023-10-02T19:25:35.122663313Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:35.122724 env[1103]: time="2023-10-02T19:25:35.122699944Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:35.122724 env[1103]: time="2023-10-02T19:25:35.122712347Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:35.122924 env[1103]: time="2023-10-02T19:25:35.122877375Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/882b7f8f3046289d6147a4938a407c16181a352b9490f881abeec6f5d1e094cd pid=1730 runtime=io.containerd.runc.v2 Oct 2 19:25:35.132006 env[1103]: time="2023-10-02T19:25:35.131909540Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:35.132006 env[1103]: time="2023-10-02T19:25:35.131943837Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:35.132006 env[1103]: time="2023-10-02T19:25:35.131952914Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:35.132374 env[1103]: time="2023-10-02T19:25:35.132317235Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/74f3d194a9a5499d06f5aab407259c118b2f511b1d9408ccce22f2c9e54dbe96 pid=1758 runtime=io.containerd.runc.v2 Oct 2 19:25:35.134179 env[1103]: time="2023-10-02T19:25:35.134124582Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:35.134236 env[1103]: time="2023-10-02T19:25:35.134162846Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:35.134236 env[1103]: time="2023-10-02T19:25:35.134200137Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:35.134436 env[1103]: time="2023-10-02T19:25:35.134378340Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bd32a24e20868324c4731b279f142e2aa7fec5af035514962de647e65d17a12c pid=1757 runtime=io.containerd.runc.v2 Oct 2 19:25:35.139879 systemd[1]: Started cri-containerd-882b7f8f3046289d6147a4938a407c16181a352b9490f881abeec6f5d1e094cd.scope. Oct 2 19:25:35.147437 systemd[1]: Started cri-containerd-bd32a24e20868324c4731b279f142e2aa7fec5af035514962de647e65d17a12c.scope. Oct 2 19:25:35.161378 kernel: kauditd_printk_skb: 280 callbacks suppressed Oct 2 19:25:35.161476 kernel: audit: type=1400 audit(1696274735.149:597): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.161492 kernel: audit: type=1400 audit(1696274735.149:598): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.161512 kernel: audit: type=1400 audit(1696274735.149:599): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.161526 kernel: audit: type=1400 audit(1696274735.149:600): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.161538 kernel: audit: type=1400 audit(1696274735.149:601): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.165784 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:25:35.165817 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:25:35.165830 kernel: audit: backlog limit exceeded Oct 2 19:25:35.165846 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:25:35.165859 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:25:35.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.149000 audit: BPF prog-id=64 op=LOAD Oct 2 19:25:35.151000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.151000 audit[1741]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1730 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.151000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838326237663866333034363238396436313437613439333861343037 Oct 2 19:25:35.151000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.151000 audit[1741]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1730 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.151000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838326237663866333034363238396436313437613439333861343037 Oct 2 19:25:35.152000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.152000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.152000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.152000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.152000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.152000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.152000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.152000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.152000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.152000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.152000 audit: BPF prog-id=65 op=LOAD Oct 2 19:25:35.152000 audit[1741]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000098f00 items=0 ppid=1730 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838326237663866333034363238396436313437613439333861343037 Oct 2 19:25:35.156000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.156000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.156000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.156000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.156000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.156000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.156000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.156000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.156000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.156000 audit: BPF prog-id=66 op=LOAD Oct 2 19:25:35.156000 audit[1741]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000098f48 items=0 ppid=1730 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.156000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838326237663866333034363238396436313437613439333861343037 Oct 2 19:25:35.158000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:25:35.158000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:25:35.158000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.158000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.158000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.158000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.158000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.158000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.158000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.158000 audit[1741]: AVC avc: denied { perfmon } for pid=1741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.158000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.158000 audit[1741]: AVC avc: denied { bpf } for pid=1741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.158000 audit: BPF prog-id=67 op=LOAD Oct 2 19:25:35.158000 audit[1741]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000099358 items=0 ppid=1730 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838326237663866333034363238396436313437613439333861343037 Oct 2 19:25:35.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.165000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.165000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.165000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.165000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.165000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.165000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.165000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.165000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.165000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.165000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.165000 audit: BPF prog-id=71 op=LOAD Oct 2 19:25:35.165000 audit[1782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0002a8a68 items=0 ppid=1757 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264333261323465323038363833323463343733316232373966313432 Oct 2 19:25:35.168053 systemd[1]: Started cri-containerd-74f3d194a9a5499d06f5aab407259c118b2f511b1d9408ccce22f2c9e54dbe96.scope. Oct 2 19:25:35.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.177000 audit: BPF prog-id=72 op=LOAD Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1758 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734663364313934613961353439396430366635616162343037323539 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1758 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734663364313934613961353439396430366635616162343037323539 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit: BPF prog-id=73 op=LOAD Oct 2 19:25:35.178000 audit[1778]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000218ff0 items=0 ppid=1758 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734663364313934613961353439396430366635616162343037323539 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit: BPF prog-id=74 op=LOAD Oct 2 19:25:35.178000 audit[1778]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000219038 items=0 ppid=1758 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734663364313934613961353439396430366635616162343037323539 Oct 2 19:25:35.178000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:25:35.178000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.178000 audit: BPF prog-id=75 op=LOAD Oct 2 19:25:35.178000 audit[1778]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000219448 items=0 ppid=1758 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734663364313934613961353439396430366635616162343037323539 Oct 2 19:25:35.192163 env[1103]: time="2023-10-02T19:25:35.192127255Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:e2803e1b862ab492426e2c33273b6ccb,Namespace:kube-system,Attempt:0,} returns sandbox id \"882b7f8f3046289d6147a4938a407c16181a352b9490f881abeec6f5d1e094cd\"" Oct 2 19:25:35.193231 kubelet[1650]: E1002 19:25:35.193211 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:35.196642 env[1103]: time="2023-10-02T19:25:35.196611221Z" level=info msg="CreateContainer within sandbox \"882b7f8f3046289d6147a4938a407c16181a352b9490f881abeec6f5d1e094cd\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:25:35.205503 env[1103]: time="2023-10-02T19:25:35.205453451Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,} returns sandbox id \"bd32a24e20868324c4731b279f142e2aa7fec5af035514962de647e65d17a12c\"" Oct 2 19:25:35.206146 kubelet[1650]: E1002 19:25:35.206121 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:35.207527 env[1103]: time="2023-10-02T19:25:35.207497984Z" level=info msg="CreateContainer within sandbox \"bd32a24e20868324c4731b279f142e2aa7fec5af035514962de647e65d17a12c\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:25:35.207867 env[1103]: time="2023-10-02T19:25:35.207841846Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,} returns sandbox id \"74f3d194a9a5499d06f5aab407259c118b2f511b1d9408ccce22f2c9e54dbe96\"" Oct 2 19:25:35.208318 kubelet[1650]: E1002 19:25:35.208299 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:35.209998 env[1103]: time="2023-10-02T19:25:35.209973426Z" level=info msg="CreateContainer within sandbox \"74f3d194a9a5499d06f5aab407259c118b2f511b1d9408ccce22f2c9e54dbe96\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:25:35.219514 env[1103]: time="2023-10-02T19:25:35.219479183Z" level=info msg="CreateContainer within sandbox \"882b7f8f3046289d6147a4938a407c16181a352b9490f881abeec6f5d1e094cd\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"ae13bab6a51d8516a9db01dcde2403b8965887516e98b44c99a6465c0c070931\"" Oct 2 19:25:35.220141 env[1103]: time="2023-10-02T19:25:35.220121739Z" level=info msg="StartContainer for \"ae13bab6a51d8516a9db01dcde2403b8965887516e98b44c99a6465c0c070931\"" Oct 2 19:25:35.230365 env[1103]: time="2023-10-02T19:25:35.230309778Z" level=info msg="CreateContainer within sandbox \"74f3d194a9a5499d06f5aab407259c118b2f511b1d9408ccce22f2c9e54dbe96\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"18f3b4837ac8da64ea0198fd8ccfae5aecf21759aeb66ee39cbbe62c30846276\"" Oct 2 19:25:35.231025 env[1103]: time="2023-10-02T19:25:35.230960771Z" level=info msg="StartContainer for \"18f3b4837ac8da64ea0198fd8ccfae5aecf21759aeb66ee39cbbe62c30846276\"" Oct 2 19:25:35.231628 env[1103]: time="2023-10-02T19:25:35.231605721Z" level=info msg="CreateContainer within sandbox \"bd32a24e20868324c4731b279f142e2aa7fec5af035514962de647e65d17a12c\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"96fd002d2a2df04ce1b5a9cf7d3e9d7b5183dde82e624878062ca20a825b4c43\"" Oct 2 19:25:35.232178 env[1103]: time="2023-10-02T19:25:35.232149969Z" level=info msg="StartContainer for \"96fd002d2a2df04ce1b5a9cf7d3e9d7b5183dde82e624878062ca20a825b4c43\"" Oct 2 19:25:35.234013 systemd[1]: Started cri-containerd-ae13bab6a51d8516a9db01dcde2403b8965887516e98b44c99a6465c0c070931.scope. Oct 2 19:25:35.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.244000 audit: BPF prog-id=76 op=LOAD Oct 2 19:25:35.245000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.245000 audit[1857]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1730 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165313362616236613531643835313661396462303164636465323430 Oct 2 19:25:35.245000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.245000 audit[1857]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1730 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165313362616236613531643835313661396462303164636465323430 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit: BPF prog-id=77 op=LOAD Oct 2 19:25:35.246000 audit[1857]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002171d0 items=0 ppid=1730 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.246000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165313362616236613531643835313661396462303164636465323430 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.246000 audit: BPF prog-id=78 op=LOAD Oct 2 19:25:35.246000 audit[1857]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000217218 items=0 ppid=1730 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.246000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165313362616236613531643835313661396462303164636465323430 Oct 2 19:25:35.247000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:25:35.247000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:25:35.247000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.247000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.247000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.247000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.247000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.247000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.247000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.247000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.247000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.247000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.247000 audit: BPF prog-id=79 op=LOAD Oct 2 19:25:35.247000 audit[1857]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000217628 items=0 ppid=1730 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165313362616236613531643835313661396462303164636465323430 Oct 2 19:25:35.249753 systemd[1]: Started cri-containerd-96fd002d2a2df04ce1b5a9cf7d3e9d7b5183dde82e624878062ca20a825b4c43.scope. Oct 2 19:25:35.252927 systemd[1]: Started cri-containerd-18f3b4837ac8da64ea0198fd8ccfae5aecf21759aeb66ee39cbbe62c30846276.scope. Oct 2 19:25:35.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.259000 audit: BPF prog-id=80 op=LOAD Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1757 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936666430303264326132646630346365316235613963663764336539 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1757 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936666430303264326132646630346365316235613963663764336539 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit: BPF prog-id=81 op=LOAD Oct 2 19:25:35.260000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000310b90 items=0 ppid=1757 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936666430303264326132646630346365316235613963663764336539 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit: BPF prog-id=82 op=LOAD Oct 2 19:25:35.260000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000310bd8 items=0 ppid=1757 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936666430303264326132646630346365316235613963663764336539 Oct 2 19:25:35.260000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:25:35.260000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.260000 audit: BPF prog-id=83 op=LOAD Oct 2 19:25:35.260000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000310fe8 items=0 ppid=1757 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936666430303264326132646630346365316235613963663764336539 Oct 2 19:25:35.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.262000 audit: BPF prog-id=84 op=LOAD Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1758 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138663362343833376163386461363465613031393866643863636661 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1758 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138663362343833376163386461363465613031393866643863636661 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit: BPF prog-id=85 op=LOAD Oct 2 19:25:35.263000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003d4ba0 items=0 ppid=1758 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138663362343833376163386461363465613031393866643863636661 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit: BPF prog-id=86 op=LOAD Oct 2 19:25:35.263000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003d4be8 items=0 ppid=1758 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138663362343833376163386461363465613031393866643863636661 Oct 2 19:25:35.263000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:25:35.263000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.263000 audit: BPF prog-id=87 op=LOAD Oct 2 19:25:35.263000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d4ff8 items=0 ppid=1758 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:35.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138663362343833376163386461363465613031393866643863636661 Oct 2 19:25:35.281893 kubelet[1650]: E1002 19:25:35.281855 1650 controller.go:146] failed to ensure lease exists, will retry in 3.2s, error: Get "https://10.0.0.11:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.11:6443: connect: connection refused Oct 2 19:25:35.282446 env[1103]: time="2023-10-02T19:25:35.282414625Z" level=info msg="StartContainer for \"ae13bab6a51d8516a9db01dcde2403b8965887516e98b44c99a6465c0c070931\" returns successfully" Oct 2 19:25:35.293561 env[1103]: time="2023-10-02T19:25:35.293487938Z" level=info msg="StartContainer for \"96fd002d2a2df04ce1b5a9cf7d3e9d7b5183dde82e624878062ca20a825b4c43\" returns successfully" Oct 2 19:25:35.295965 env[1103]: time="2023-10-02T19:25:35.295937120Z" level=info msg="StartContainer for \"18f3b4837ac8da64ea0198fd8ccfae5aecf21759aeb66ee39cbbe62c30846276\" returns successfully" Oct 2 19:25:35.343538 kubelet[1650]: E1002 19:25:35.337952 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:35.343538 kubelet[1650]: I1002 19:25:35.338251 1650 status_manager.go:698] "Failed to get status for pod" podUID=b3fbb6a05b0456c4809ee638aa5cfabe pod="kube-system/kube-controller-manager-localhost" err="Get \"https://10.0.0.11:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-localhost\": dial tcp 10.0.0.11:6443: connect: connection refused" Oct 2 19:25:35.345881 kubelet[1650]: I1002 19:25:35.345517 1650 status_manager.go:698] "Failed to get status for pod" podUID=fbbee22b6941d370b4e7de3cf42df07f pod="kube-system/kube-scheduler-localhost" err="Get \"https://10.0.0.11:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-localhost\": dial tcp 10.0.0.11:6443: connect: connection refused" Oct 2 19:25:35.345881 kubelet[1650]: E1002 19:25:35.345845 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:35.349481 kubelet[1650]: I1002 19:25:35.349065 1650 status_manager.go:698] "Failed to get status for pod" podUID=e2803e1b862ab492426e2c33273b6ccb pod="kube-system/kube-apiserver-localhost" err="Get \"https://10.0.0.11:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-localhost\": dial tcp 10.0.0.11:6443: connect: connection refused" Oct 2 19:25:35.356208 kubelet[1650]: E1002 19:25:35.356184 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:35.384089 kubelet[1650]: I1002 19:25:35.384062 1650 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:35.801000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:35.801000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0007f2000 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:25:35.802000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:35.801000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:35.802000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c92020 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:25:35.802000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:36.350185 kubelet[1650]: E1002 19:25:36.350150 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:36.350628 kubelet[1650]: E1002 19:25:36.350595 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:36.350989 kubelet[1650]: E1002 19:25:36.350967 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:36.436000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:36.436000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c004c26030 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:25:36.436000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:25:36.436000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:36.436000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c000342240 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:25:36.436000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:36.436000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c004ca6030 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:25:36.436000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:25:36.436000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:25:36.437000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:36.437000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=47 a1=c004c26450 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:25:36.437000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:25:36.447000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:36.447000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c001934a60 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:25:36.447000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:25:36.448000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:36.448000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c004ca6f60 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:25:36.448000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:25:37.013483 kubelet[1650]: I1002 19:25:37.013427 1650 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:25:37.058117 kubelet[1650]: E1002 19:25:37.057997 1650 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a60e1baa42ce2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 273642722, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 273642722, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:25:37.273402 kubelet[1650]: I1002 19:25:37.273272 1650 apiserver.go:52] "Watching apiserver" Oct 2 19:25:37.276924 kubelet[1650]: I1002 19:25:37.276890 1650 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:25:37.303050 kubelet[1650]: I1002 19:25:37.303019 1650 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:25:37.462392 kubelet[1650]: E1002 19:25:37.462351 1650 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:37.462875 kubelet[1650]: E1002 19:25:37.462852 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:37.463263 kubelet[1650]: E1002 19:25:37.463182 1650 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a60e1bad12591", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 276589969, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 276589969, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:25:37.516547 kubelet[1650]: E1002 19:25:37.516442 1650 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a60e1bbbbbea6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 291964582, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 291964582, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:25:37.569673 kubelet[1650]: E1002 19:25:37.569523 1650 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a60e1bbbbcdd5", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node localhost status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 291968469, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 291968469, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:25:37.621982 kubelet[1650]: E1002 19:25:37.621889 1650 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a60e1bbbbd87a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node localhost status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 291971194, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 291971194, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:25:37.675684 kubelet[1650]: E1002 19:25:37.675599 1650 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a60e1bf53560b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 352230923, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 352230923, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:25:37.729883 kubelet[1650]: E1002 19:25:37.729781 1650 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a60e1bbbbbea6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 291964582, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 25, 32, 377034318, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:25:39.062035 systemd[1]: Reloading. Oct 2 19:25:39.111049 kubelet[1650]: E1002 19:25:39.111002 1650 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:39.121611 /usr/lib/systemd/system-generators/torcx-generator[1988]: time="2023-10-02T19:25:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:25:39.121648 /usr/lib/systemd/system-generators/torcx-generator[1988]: time="2023-10-02T19:25:39Z" level=info msg="torcx already run" Oct 2 19:25:39.179442 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:25:39.179457 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:25:39.198877 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:25:39.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit: BPF prog-id=88 op=LOAD Oct 2 19:25:39.265000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit: BPF prog-id=89 op=LOAD Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.265000 audit: BPF prog-id=90 op=LOAD Oct 2 19:25:39.265000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:25:39.265000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit: BPF prog-id=91 op=LOAD Oct 2 19:25:39.266000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit: BPF prog-id=92 op=LOAD Oct 2 19:25:39.267000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit: BPF prog-id=93 op=LOAD Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.267000 audit: BPF prog-id=94 op=LOAD Oct 2 19:25:39.267000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:25:39.267000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:25:39.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.268000 audit: BPF prog-id=95 op=LOAD Oct 2 19:25:39.268000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:25:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.269000 audit: BPF prog-id=96 op=LOAD Oct 2 19:25:39.269000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit: BPF prog-id=97 op=LOAD Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.270000 audit: BPF prog-id=98 op=LOAD Oct 2 19:25:39.270000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:25:39.270000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:25:39.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.271000 audit: BPF prog-id=99 op=LOAD Oct 2 19:25:39.271000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit: BPF prog-id=100 op=LOAD Oct 2 19:25:39.272000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit: BPF prog-id=101 op=LOAD Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.272000 audit: BPF prog-id=102 op=LOAD Oct 2 19:25:39.272000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:25:39.272000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:25:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.274000 audit: BPF prog-id=103 op=LOAD Oct 2 19:25:39.274000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:25:39.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.275000 audit: BPF prog-id=104 op=LOAD Oct 2 19:25:39.275000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit: BPF prog-id=105 op=LOAD Oct 2 19:25:39.276000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.277000 audit: BPF prog-id=106 op=LOAD Oct 2 19:25:39.277000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:25:39.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.277000 audit: BPF prog-id=107 op=LOAD Oct 2 19:25:39.277000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:25:39.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.279000 audit: BPF prog-id=108 op=LOAD Oct 2 19:25:39.279000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:25:39.289125 kubelet[1650]: I1002 19:25:39.289082 1650 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:25:39.289308 systemd[1]: Stopping kubelet.service... Oct 2 19:25:39.310573 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:25:39.310735 systemd[1]: Stopped kubelet.service. Oct 2 19:25:39.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:39.312185 systemd[1]: Started kubelet.service. Oct 2 19:25:39.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:39.368413 kubelet[2029]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:25:39.368413 kubelet[2029]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:25:39.368717 kubelet[2029]: I1002 19:25:39.368433 2029 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:25:39.369511 kubelet[2029]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:25:39.369511 kubelet[2029]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:25:39.372434 kubelet[2029]: I1002 19:25:39.372417 2029 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:25:39.372434 kubelet[2029]: I1002 19:25:39.372432 2029 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:25:39.372580 kubelet[2029]: I1002 19:25:39.372570 2029 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:25:39.373493 kubelet[2029]: I1002 19:25:39.373479 2029 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:25:39.374013 kubelet[2029]: I1002 19:25:39.373982 2029 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:25:39.376919 kubelet[2029]: I1002 19:25:39.376897 2029 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:25:39.377054 kubelet[2029]: I1002 19:25:39.377034 2029 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:25:39.377139 kubelet[2029]: I1002 19:25:39.377112 2029 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:25:39.377139 kubelet[2029]: I1002 19:25:39.377140 2029 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:25:39.377278 kubelet[2029]: I1002 19:25:39.377154 2029 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:25:39.377278 kubelet[2029]: I1002 19:25:39.377181 2029 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:25:39.380435 kubelet[2029]: I1002 19:25:39.380414 2029 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:25:39.380435 kubelet[2029]: I1002 19:25:39.380434 2029 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:25:39.380548 kubelet[2029]: I1002 19:25:39.380453 2029 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:25:39.380548 kubelet[2029]: I1002 19:25:39.380466 2029 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:25:39.381368 kubelet[2029]: I1002 19:25:39.381353 2029 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:25:39.381744 kubelet[2029]: I1002 19:25:39.381723 2029 server.go:1186] "Started kubelet" Oct 2 19:25:39.381000 audit[2029]: AVC avc: denied { mac_admin } for pid=2029 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.381000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:25:39.381000 audit[2029]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000f298f0 a1=c000bcee70 a2=c000f298c0 a3=25 items=0 ppid=1 pid=2029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:39.381000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:25:39.381000 audit[2029]: AVC avc: denied { mac_admin } for pid=2029 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.381000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:25:39.381000 audit[2029]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a988e0 a1=c000bcee88 a2=c000f29980 a3=25 items=0 ppid=1 pid=2029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:39.381000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:25:39.383299 kubelet[2029]: I1002 19:25:39.383055 2029 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:25:39.383299 kubelet[2029]: I1002 19:25:39.383083 2029 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:25:39.383299 kubelet[2029]: I1002 19:25:39.383098 2029 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:25:39.385508 kubelet[2029]: I1002 19:25:39.385485 2029 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:25:39.386081 kubelet[2029]: I1002 19:25:39.386058 2029 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:25:39.388247 kubelet[2029]: I1002 19:25:39.388221 2029 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:25:39.389729 kubelet[2029]: I1002 19:25:39.389704 2029 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:25:39.390716 kubelet[2029]: E1002 19:25:39.390692 2029 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:25:39.390716 kubelet[2029]: E1002 19:25:39.390717 2029 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:25:39.419737 kubelet[2029]: I1002 19:25:39.419698 2029 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:25:39.429672 kubelet[2029]: I1002 19:25:39.429653 2029 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:25:39.429672 kubelet[2029]: I1002 19:25:39.429671 2029 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:25:39.429767 kubelet[2029]: I1002 19:25:39.429688 2029 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:25:39.429767 kubelet[2029]: E1002 19:25:39.429731 2029 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:25:39.431871 kubelet[2029]: I1002 19:25:39.431850 2029 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:25:39.431871 kubelet[2029]: I1002 19:25:39.431868 2029 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:25:39.431935 kubelet[2029]: I1002 19:25:39.431891 2029 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:25:39.432036 kubelet[2029]: I1002 19:25:39.432017 2029 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:25:39.432036 kubelet[2029]: I1002 19:25:39.432033 2029 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:25:39.432036 kubelet[2029]: I1002 19:25:39.432039 2029 policy_none.go:49] "None policy: Start" Oct 2 19:25:39.432538 kubelet[2029]: I1002 19:25:39.432526 2029 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:25:39.432631 kubelet[2029]: I1002 19:25:39.432619 2029 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:25:39.432872 kubelet[2029]: I1002 19:25:39.432862 2029 state_mem.go:75] "Updated machine memory state" Oct 2 19:25:39.438505 kubelet[2029]: I1002 19:25:39.438475 2029 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:25:39.437000 audit[2029]: AVC avc: denied { mac_admin } for pid=2029 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:39.437000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:25:39.437000 audit[2029]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000efe090 a1=c000eb7bc0 a2=c000efe060 a3=25 items=0 ppid=1 pid=2029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:39.437000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:25:39.438726 kubelet[2029]: I1002 19:25:39.438540 2029 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:25:39.438726 kubelet[2029]: I1002 19:25:39.438709 2029 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:25:39.447000 audit[2082]: USER_ACCT pid=2082 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:39.448898 sudo[2082]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:25:39.447000 audit[2082]: CRED_REFR pid=2082 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:39.449107 sudo[2082]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:25:39.449000 audit[2082]: USER_START pid=2082 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:39.491814 kubelet[2029]: I1002 19:25:39.491795 2029 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:39.497701 kubelet[2029]: I1002 19:25:39.497686 2029 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:25:39.497916 kubelet[2029]: I1002 19:25:39.497904 2029 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:25:39.530039 kubelet[2029]: I1002 19:25:39.529992 2029 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:25:39.530184 kubelet[2029]: I1002 19:25:39.530084 2029 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:25:39.530184 kubelet[2029]: I1002 19:25:39.530111 2029 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:25:39.535941 kubelet[2029]: E1002 19:25:39.535908 2029 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:25:39.691413 kubelet[2029]: I1002 19:25:39.691302 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e2803e1b862ab492426e2c33273b6ccb-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"e2803e1b862ab492426e2c33273b6ccb\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:39.691413 kubelet[2029]: I1002 19:25:39.691354 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e2803e1b862ab492426e2c33273b6ccb-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"e2803e1b862ab492426e2c33273b6ccb\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:39.691413 kubelet[2029]: I1002 19:25:39.691401 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e2803e1b862ab492426e2c33273b6ccb-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"e2803e1b862ab492426e2c33273b6ccb\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:39.691413 kubelet[2029]: I1002 19:25:39.691422 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:39.691612 kubelet[2029]: I1002 19:25:39.691506 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:39.691612 kubelet[2029]: I1002 19:25:39.691576 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:25:39.691612 kubelet[2029]: I1002 19:25:39.691599 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:39.691678 kubelet[2029]: I1002 19:25:39.691616 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:39.691678 kubelet[2029]: I1002 19:25:39.691647 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:39.837560 kubelet[2029]: E1002 19:25:39.837530 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:39.837882 kubelet[2029]: E1002 19:25:39.837845 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:39.885436 kubelet[2029]: E1002 19:25:39.885403 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:39.907393 sudo[2082]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:39.906000 audit[2082]: USER_END pid=2082 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:39.906000 audit[2082]: CRED_DISP pid=2082 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:40.381289 kubelet[2029]: I1002 19:25:40.381242 2029 apiserver.go:52] "Watching apiserver" Oct 2 19:25:40.390171 kubelet[2029]: I1002 19:25:40.390130 2029 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:25:40.396301 kubelet[2029]: I1002 19:25:40.396272 2029 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:25:40.785750 kubelet[2029]: E1002 19:25:40.785713 2029 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:25:40.785983 kubelet[2029]: E1002 19:25:40.785959 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:40.788488 sudo[1235]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:40.787000 audit[1235]: USER_END pid=1235 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:40.791401 kernel: kauditd_printk_skb: 665 callbacks suppressed Oct 2 19:25:40.791495 kernel: audit: type=1106 audit(1696274740.787:959): pid=1235 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:40.790000 audit[1235]: CRED_DISP pid=1235 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:40.792350 kernel: audit: type=1104 audit(1696274740.790:960): pid=1235 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:40.794174 sshd[1231]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:40.793000 audit[1231]: USER_END pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:40.796034 systemd[1]: sshd@6-10.0.0.11:22-10.0.0.1:51992.service: Deactivated successfully. Oct 2 19:25:40.796696 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:25:40.796851 systemd[1]: session-7.scope: Consumed 3.150s CPU time. Oct 2 19:25:40.797231 systemd-logind[1094]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:25:40.793000 audit[1231]: CRED_DISP pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:40.797912 systemd-logind[1094]: Removed session 7. Oct 2 19:25:40.800102 kernel: audit: type=1106 audit(1696274740.793:961): pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:40.800152 kernel: audit: type=1104 audit(1696274740.793:962): pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:40.800169 kernel: audit: type=1131 audit(1696274740.794:963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.11:22-10.0.0.1:51992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:40.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.11:22-10.0.0.1:51992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:40.986922 kubelet[2029]: E1002 19:25:40.986875 2029 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:40.987300 kubelet[2029]: E1002 19:25:40.987280 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:41.173000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32591 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:25:41.178352 kernel: audit: type=1400 audit(1696274741.173:964): avc: denied { watch } for pid=1916 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32591 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:25:41.173000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e87340 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:25:41.173000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:41.184590 kernel: audit: type=1300 audit(1696274741.173:964): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e87340 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:25:41.184630 kernel: audit: type=1327 audit(1696274741.173:964): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:41.185781 kubelet[2029]: E1002 19:25:41.185754 2029 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:41.186128 kubelet[2029]: E1002 19:25:41.186108 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:41.394172 kubelet[2029]: I1002 19:25:41.394123 2029 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.39407367 pod.CreationTimestamp="2023-10-02 19:25:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:25:41.394025158 +0000 UTC m=+2.077455552" watchObservedRunningTime="2023-10-02 19:25:41.39407367 +0000 UTC m=+2.077504064" Oct 2 19:25:41.438878 kubelet[2029]: E1002 19:25:41.438782 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:41.438878 kubelet[2029]: E1002 19:25:41.438811 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:41.439060 kubelet[2029]: E1002 19:25:41.439044 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:42.185750 kubelet[2029]: I1002 19:25:42.185717 2029 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=3.185650194 pod.CreationTimestamp="2023-10-02 19:25:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:25:42.185541788 +0000 UTC m=+2.868972182" watchObservedRunningTime="2023-10-02 19:25:42.185650194 +0000 UTC m=+2.869080588" Oct 2 19:25:42.185916 kubelet[2029]: I1002 19:25:42.185832 2029 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=3.185816942 pod.CreationTimestamp="2023-10-02 19:25:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:25:41.785858821 +0000 UTC m=+2.469289215" watchObservedRunningTime="2023-10-02 19:25:42.185816942 +0000 UTC m=+2.869247336" Oct 2 19:25:45.156951 kubelet[2029]: E1002 19:25:45.156921 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:45.444757 kubelet[2029]: E1002 19:25:45.444656 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:45.794494 kubelet[2029]: E1002 19:25:45.794452 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:46.445866 kubelet[2029]: E1002 19:25:46.445834 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:46.446228 kubelet[2029]: E1002 19:25:46.446092 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:46.639637 kubelet[2029]: E1002 19:25:46.639610 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:47.045763 update_engine[1096]: I1002 19:25:47.045704 1096 update_attempter.cc:505] Updating boot flags... Oct 2 19:25:47.447416 kubelet[2029]: E1002 19:25:47.447276 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:52.817000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:52.817000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d3d380 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:25:52.825449 kernel: audit: type=1400 audit(1696274752.817:965): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:52.825551 kernel: audit: type=1300 audit(1696274752.817:965): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d3d380 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:25:52.825620 kernel: audit: type=1327 audit(1696274752.817:965): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:52.817000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:52.818000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:52.831256 kernel: audit: type=1400 audit(1696274752.818:966): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:52.831371 kernel: audit: type=1300 audit(1696274752.818:966): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000c93b80 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:25:52.818000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000c93b80 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:25:52.818000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:52.837702 kernel: audit: type=1327 audit(1696274752.818:966): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:52.838178 kernel: audit: type=1400 audit(1696274752.819:967): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:52.819000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:52.841146 kernel: audit: type=1300 audit(1696274752.819:967): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000c93cc0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:25:52.819000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000c93cc0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:25:52.819000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:52.846751 kernel: audit: type=1327 audit(1696274752.819:967): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:52.846795 kernel: audit: type=1400 audit(1696274752.820:968): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:52.820000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:52.820000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cd6cc0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:25:52.820000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:52.957072 kubelet[2029]: I1002 19:25:52.957042 2029 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:25:52.957486 env[1103]: time="2023-10-02T19:25:52.957329569Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:25:52.957715 kubelet[2029]: I1002 19:25:52.957509 2029 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:25:53.493649 kubelet[2029]: I1002 19:25:53.493616 2029 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:25:53.494552 kubelet[2029]: I1002 19:25:53.494534 2029 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:25:53.499246 systemd[1]: Created slice kubepods-besteffort-podd9e042f6_9574_4649_91b2_f3c46357209f.slice. Oct 2 19:25:53.509321 systemd[1]: Created slice kubepods-burstable-podb898b2a7_183d_4299_b143_f9d84d2b8c98.slice. Oct 2 19:25:53.640199 kubelet[2029]: I1002 19:25:53.640156 2029 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:25:53.644754 systemd[1]: Created slice kubepods-besteffort-podaa30c05d_8627_422d_a510_f2d1401b594f.slice. Oct 2 19:25:53.682214 kubelet[2029]: I1002 19:25:53.682185 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-host-proc-sys-kernel\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682214 kubelet[2029]: I1002 19:25:53.682219 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-lib-modules\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682214 kubelet[2029]: I1002 19:25:53.682238 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-hostproc\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682455 kubelet[2029]: I1002 19:25:53.682255 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-cilium-run\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682455 kubelet[2029]: I1002 19:25:53.682271 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-xtables-lock\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682455 kubelet[2029]: I1002 19:25:53.682289 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/b898b2a7-183d-4299-b143-f9d84d2b8c98-clustermesh-secrets\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682455 kubelet[2029]: I1002 19:25:53.682306 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-host-proc-sys-net\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682455 kubelet[2029]: I1002 19:25:53.682323 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5kv6x\" (UniqueName: \"kubernetes.io/projected/b898b2a7-183d-4299-b143-f9d84d2b8c98-kube-api-access-5kv6x\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682455 kubelet[2029]: I1002 19:25:53.682384 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/d9e042f6-9574-4649-91b2-f3c46357209f-kube-proxy\") pod \"kube-proxy-wrxhv\" (UID: \"d9e042f6-9574-4649-91b2-f3c46357209f\") " pod="kube-system/kube-proxy-wrxhv" Oct 2 19:25:53.682597 kubelet[2029]: I1002 19:25:53.682415 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d9e042f6-9574-4649-91b2-f3c46357209f-xtables-lock\") pod \"kube-proxy-wrxhv\" (UID: \"d9e042f6-9574-4649-91b2-f3c46357209f\") " pod="kube-system/kube-proxy-wrxhv" Oct 2 19:25:53.682597 kubelet[2029]: I1002 19:25:53.682437 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bqs2z\" (UniqueName: \"kubernetes.io/projected/d9e042f6-9574-4649-91b2-f3c46357209f-kube-api-access-bqs2z\") pod \"kube-proxy-wrxhv\" (UID: \"d9e042f6-9574-4649-91b2-f3c46357209f\") " pod="kube-system/kube-proxy-wrxhv" Oct 2 19:25:53.682597 kubelet[2029]: I1002 19:25:53.682474 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-bpf-maps\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682597 kubelet[2029]: I1002 19:25:53.682497 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-cni-path\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682597 kubelet[2029]: I1002 19:25:53.682513 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/b898b2a7-183d-4299-b143-f9d84d2b8c98-cilium-config-path\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682597 kubelet[2029]: I1002 19:25:53.682536 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d9e042f6-9574-4649-91b2-f3c46357209f-lib-modules\") pod \"kube-proxy-wrxhv\" (UID: \"d9e042f6-9574-4649-91b2-f3c46357209f\") " pod="kube-system/kube-proxy-wrxhv" Oct 2 19:25:53.682737 kubelet[2029]: I1002 19:25:53.682552 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-cilium-cgroup\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682737 kubelet[2029]: I1002 19:25:53.682568 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/b898b2a7-183d-4299-b143-f9d84d2b8c98-hubble-tls\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.682737 kubelet[2029]: I1002 19:25:53.682604 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-etc-cni-netd\") pod \"cilium-zkdhc\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " pod="kube-system/cilium-zkdhc" Oct 2 19:25:53.783574 kubelet[2029]: I1002 19:25:53.783465 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-w84q6\" (UniqueName: \"kubernetes.io/projected/aa30c05d-8627-422d-a510-f2d1401b594f-kube-api-access-w84q6\") pod \"cilium-operator-f59cbd8c6-8ndwn\" (UID: \"aa30c05d-8627-422d-a510-f2d1401b594f\") " pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:25:53.783708 kubelet[2029]: I1002 19:25:53.783651 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/aa30c05d-8627-422d-a510-f2d1401b594f-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-8ndwn\" (UID: \"aa30c05d-8627-422d-a510-f2d1401b594f\") " pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:25:54.107697 kubelet[2029]: E1002 19:25:54.107581 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:54.108406 env[1103]: time="2023-10-02T19:25:54.108367536Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-wrxhv,Uid:d9e042f6-9574-4649-91b2-f3c46357209f,Namespace:kube-system,Attempt:0,}" Oct 2 19:25:54.111906 kubelet[2029]: E1002 19:25:54.111879 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:54.112597 env[1103]: time="2023-10-02T19:25:54.112375128Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-zkdhc,Uid:b898b2a7-183d-4299-b143-f9d84d2b8c98,Namespace:kube-system,Attempt:0,}" Oct 2 19:25:54.129360 env[1103]: time="2023-10-02T19:25:54.129269851Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:54.129495 env[1103]: time="2023-10-02T19:25:54.129377555Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:54.129495 env[1103]: time="2023-10-02T19:25:54.129412020Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:54.129650 env[1103]: time="2023-10-02T19:25:54.129595757Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/289ae8071a34a9886ed266934ed5ed1489d536d428ffab7b232cea892f408037 pid=2152 runtime=io.containerd.runc.v2 Oct 2 19:25:54.133214 env[1103]: time="2023-10-02T19:25:54.133157236Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:54.133328 env[1103]: time="2023-10-02T19:25:54.133202071Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:54.133328 env[1103]: time="2023-10-02T19:25:54.133216328Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:54.133522 env[1103]: time="2023-10-02T19:25:54.133483864Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd pid=2170 runtime=io.containerd.runc.v2 Oct 2 19:25:54.140048 systemd[1]: Started cri-containerd-289ae8071a34a9886ed266934ed5ed1489d536d428ffab7b232cea892f408037.scope. Oct 2 19:25:54.151149 systemd[1]: Started cri-containerd-862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd.scope. Oct 2 19:25:54.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.154000 audit: BPF prog-id=109 op=LOAD Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2152 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238396165383037316133346139383836656432363639333465643565 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2152 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238396165383037316133346139383836656432363639333465643565 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit: BPF prog-id=110 op=LOAD Oct 2 19:25:54.155000 audit[2171]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00033e9d0 items=0 ppid=2152 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238396165383037316133346139383836656432363639333465643565 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit: BPF prog-id=111 op=LOAD Oct 2 19:25:54.155000 audit[2171]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00033ea18 items=0 ppid=2152 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238396165383037316133346139383836656432363639333465643565 Oct 2 19:25:54.155000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:25:54.155000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.155000 audit: BPF prog-id=112 op=LOAD Oct 2 19:25:54.155000 audit[2171]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00033ee28 items=0 ppid=2152 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238396165383037316133346139383836656432363639333465643565 Oct 2 19:25:54.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.159000 audit: BPF prog-id=113 op=LOAD Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2170 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836326531356261386366616137313232383032303434306132653833 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2170 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836326531356261386366616137313232383032303434306132653833 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit: BPF prog-id=114 op=LOAD Oct 2 19:25:54.160000 audit[2186]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000108f30 items=0 ppid=2170 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836326531356261386366616137313232383032303434306132653833 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit: BPF prog-id=115 op=LOAD Oct 2 19:25:54.160000 audit[2186]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000108f78 items=0 ppid=2170 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836326531356261386366616137313232383032303434306132653833 Oct 2 19:25:54.160000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:25:54.160000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.160000 audit: BPF prog-id=116 op=LOAD Oct 2 19:25:54.160000 audit[2186]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000109388 items=0 ppid=2170 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836326531356261386366616137313232383032303434306132653833 Oct 2 19:25:54.169012 env[1103]: time="2023-10-02T19:25:54.168944449Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-wrxhv,Uid:d9e042f6-9574-4649-91b2-f3c46357209f,Namespace:kube-system,Attempt:0,} returns sandbox id \"289ae8071a34a9886ed266934ed5ed1489d536d428ffab7b232cea892f408037\"" Oct 2 19:25:54.169661 kubelet[2029]: E1002 19:25:54.169643 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:54.170546 env[1103]: time="2023-10-02T19:25:54.170514345Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-zkdhc,Uid:b898b2a7-183d-4299-b143-f9d84d2b8c98,Namespace:kube-system,Attempt:0,} returns sandbox id \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\"" Oct 2 19:25:54.171357 kubelet[2029]: E1002 19:25:54.171315 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:54.171550 env[1103]: time="2023-10-02T19:25:54.171521989Z" level=info msg="CreateContainer within sandbox \"289ae8071a34a9886ed266934ed5ed1489d536d428ffab7b232cea892f408037\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:25:54.171984 env[1103]: time="2023-10-02T19:25:54.171957792Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:25:54.193010 env[1103]: time="2023-10-02T19:25:54.192958695Z" level=info msg="CreateContainer within sandbox \"289ae8071a34a9886ed266934ed5ed1489d536d428ffab7b232cea892f408037\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"41d877504fff5b9dbbfc5b751d6b1de5025a66248697ef1ff6c530e009c460a0\"" Oct 2 19:25:54.193552 env[1103]: time="2023-10-02T19:25:54.193522330Z" level=info msg="StartContainer for \"41d877504fff5b9dbbfc5b751d6b1de5025a66248697ef1ff6c530e009c460a0\"" Oct 2 19:25:54.206864 systemd[1]: Started cri-containerd-41d877504fff5b9dbbfc5b751d6b1de5025a66248697ef1ff6c530e009c460a0.scope. Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2152 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431643837373530346666663562396462626663356237353164366231 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit: BPF prog-id=117 op=LOAD Oct 2 19:25:54.218000 audit[2232]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0001f5fc0 items=0 ppid=2152 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431643837373530346666663562396462626663356237353164366231 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit: BPF prog-id=118 op=LOAD Oct 2 19:25:54.218000 audit[2232]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003e0008 items=0 ppid=2152 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431643837373530346666663562396462626663356237353164366231 Oct 2 19:25:54.218000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:25:54.218000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.218000 audit: BPF prog-id=119 op=LOAD Oct 2 19:25:54.218000 audit[2232]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003e0098 items=0 ppid=2152 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431643837373530346666663562396462626663356237353164366231 Oct 2 19:25:54.241608 env[1103]: time="2023-10-02T19:25:54.241542186Z" level=info msg="StartContainer for \"41d877504fff5b9dbbfc5b751d6b1de5025a66248697ef1ff6c530e009c460a0\" returns successfully" Oct 2 19:25:54.274000 audit[2281]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=2281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.274000 audit[2281]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd48e54450 a2=0 a3=7ffd48e5443c items=0 ppid=2243 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.274000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:25:54.275000 audit[2283]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2283 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.275000 audit[2283]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe0dfa7980 a2=0 a3=7ffe0dfa796c items=0 ppid=2243 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.275000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:25:54.276000 audit[2284]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.276000 audit[2284]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeb81d85a0 a2=0 a3=7ffeb81d858c items=0 ppid=2243 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.276000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:25:54.277000 audit[2286]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.277000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdc90879a0 a2=0 a3=7ffdc908798c items=0 ppid=2243 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.277000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:25:54.279000 audit[2285]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.279000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe21ec6270 a2=0 a3=7ffe21ec625c items=0 ppid=2243 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.279000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:25:54.282000 audit[2288]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.282000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff7b631fa0 a2=0 a3=7fff7b631f8c items=0 ppid=2243 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.282000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:25:54.381000 audit[2290]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.381000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffdcfb70650 a2=0 a3=7ffdcfb7063c items=0 ppid=2243 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.381000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:25:54.384000 audit[2292]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2292 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.384000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffeda628c80 a2=0 a3=7ffeda628c6c items=0 ppid=2243 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.384000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:25:54.387000 audit[2295]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.387000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffee0957ae0 a2=0 a3=7ffee0957acc items=0 ppid=2243 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.387000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:25:54.388000 audit[2296]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.388000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe380dc320 a2=0 a3=7ffe380dc30c items=0 ppid=2243 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.388000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:25:54.390000 audit[2298]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.390000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff71c41d10 a2=0 a3=7fff71c41cfc items=0 ppid=2243 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.390000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:25:54.391000 audit[2299]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.391000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd0d7c8020 a2=0 a3=7ffd0d7c800c items=0 ppid=2243 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.391000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:25:54.393000 audit[2301]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.393000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdba78b340 a2=0 a3=7ffdba78b32c items=0 ppid=2243 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.393000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:25:54.395000 audit[2304]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.395000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe0b3679c0 a2=0 a3=7ffe0b3679ac items=0 ppid=2243 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.395000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:25:54.396000 audit[2305]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.396000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc24579330 a2=0 a3=7ffc2457931c items=0 ppid=2243 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.396000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:25:54.398000 audit[2307]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.398000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffec4ec0440 a2=0 a3=7ffec4ec042c items=0 ppid=2243 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.398000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:25:54.399000 audit[2308]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.399000 audit[2308]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffea6137b50 a2=0 a3=7ffea6137b3c items=0 ppid=2243 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.399000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:25:54.401000 audit[2310]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.401000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc7b2b3170 a2=0 a3=7ffc7b2b315c items=0 ppid=2243 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.401000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:25:54.404000 audit[2313]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.404000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff942ec450 a2=0 a3=7fff942ec43c items=0 ppid=2243 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.404000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:25:54.407000 audit[2316]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.407000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd839eeb50 a2=0 a3=7ffd839eeb3c items=0 ppid=2243 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.407000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:25:54.408000 audit[2317]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.408000 audit[2317]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc32b470e0 a2=0 a3=7ffc32b470cc items=0 ppid=2243 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.408000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:25:54.410000 audit[2319]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.410000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffd14482c50 a2=0 a3=7ffd14482c3c items=0 ppid=2243 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.410000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:25:54.412000 audit[2322]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:54.412000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc354eed50 a2=0 a3=7ffc354eed3c items=0 ppid=2243 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.412000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:25:54.421000 audit[2326]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:54.421000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffc2fab9270 a2=0 a3=7ffc2fab925c items=0 ppid=2243 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.421000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:54.426000 audit[2326]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:54.426000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffc2fab9270 a2=0 a3=7ffc2fab925c items=0 ppid=2243 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.426000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:54.431000 audit[2331]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.431000 audit[2331]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc8721b3e0 a2=0 a3=7ffc8721b3cc items=0 ppid=2243 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.431000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:25:54.433000 audit[2333]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.433000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd39444bc0 a2=0 a3=7ffd39444bac items=0 ppid=2243 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:25:54.436000 audit[2336]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=2336 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.436000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffcb424b5e0 a2=0 a3=7ffcb424b5cc items=0 ppid=2243 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.436000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:25:54.437000 audit[2337]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2337 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.437000 audit[2337]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd99b5b2c0 a2=0 a3=7ffd99b5b2ac items=0 ppid=2243 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.437000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:25:54.439000 audit[2339]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.439000 audit[2339]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdab1eb410 a2=0 a3=7ffdab1eb3fc items=0 ppid=2243 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.439000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:25:54.440000 audit[2340]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2340 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.440000 audit[2340]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd71692910 a2=0 a3=7ffd716928fc items=0 ppid=2243 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.440000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:25:54.442000 audit[2342]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2342 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.442000 audit[2342]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc487e2ca0 a2=0 a3=7ffc487e2c8c items=0 ppid=2243 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.442000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:25:54.445000 audit[2345]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.445000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffc4e249340 a2=0 a3=7ffc4e24932c items=0 ppid=2243 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.445000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:25:54.446000 audit[2346]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2346 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.446000 audit[2346]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffffff202d0 a2=0 a3=7ffffff202bc items=0 ppid=2243 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.446000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:25:54.448000 audit[2348]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.448000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc6e3d22b0 a2=0 a3=7ffc6e3d229c items=0 ppid=2243 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.448000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:25:54.449000 audit[2349]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=2349 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.449000 audit[2349]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdd5d7dea0 a2=0 a3=7ffdd5d7de8c items=0 ppid=2243 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.449000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:25:54.451000 audit[2351]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=2351 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.451000 audit[2351]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe0e44da70 a2=0 a3=7ffe0e44da5c items=0 ppid=2243 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.451000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:25:54.453000 audit[2354]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.453000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffebb4beea0 a2=0 a3=7ffebb4bee8c items=0 ppid=2243 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.453000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:25:54.456000 audit[2357]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.456000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd4dea8dc0 a2=0 a3=7ffd4dea8dac items=0 ppid=2243 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.456000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:25:54.457000 audit[2358]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.457000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff96f3a450 a2=0 a3=7fff96f3a43c items=0 ppid=2243 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.457000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:25:54.458000 audit[2360]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=2360 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.458000 audit[2360]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc77d7e040 a2=0 a3=7ffc77d7e02c items=0 ppid=2243 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.458000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:25:54.461109 kubelet[2029]: E1002 19:25:54.461091 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:54.461000 audit[2363]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=2363 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:54.461000 audit[2363]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffdb2bf78f0 a2=0 a3=7ffdb2bf78dc items=0 ppid=2243 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.461000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:25:54.466000 audit[2367]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=2367 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:25:54.466000 audit[2367]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7fff8c5b78c0 a2=0 a3=7fff8c5b78ac items=0 ppid=2243 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.466000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:54.466000 audit[2367]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=2367 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:25:54.466000 audit[2367]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7fff8c5b78c0 a2=0 a3=7fff8c5b78ac items=0 ppid=2243 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.466000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:54.547358 kubelet[2029]: E1002 19:25:54.547303 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:54.547893 env[1103]: time="2023-10-02T19:25:54.547839833Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-8ndwn,Uid:aa30c05d-8627-422d-a510-f2d1401b594f,Namespace:kube-system,Attempt:0,}" Oct 2 19:25:54.603777 env[1103]: time="2023-10-02T19:25:54.603701658Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:54.603777 env[1103]: time="2023-10-02T19:25:54.603742304Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:54.603777 env[1103]: time="2023-10-02T19:25:54.603752253Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:54.603969 env[1103]: time="2023-10-02T19:25:54.603884823Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c pid=2375 runtime=io.containerd.runc.v2 Oct 2 19:25:54.614272 systemd[1]: Started cri-containerd-64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c.scope. Oct 2 19:25:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit: BPF prog-id=120 op=LOAD Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2375 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634383436616332353036353434666162323663313532393464623863 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2375 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634383436616332353036353434666162323663313532393464623863 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit: BPF prog-id=121 op=LOAD Oct 2 19:25:54.623000 audit[2385]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000388340 items=0 ppid=2375 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634383436616332353036353434666162323663313532393464623863 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit: BPF prog-id=122 op=LOAD Oct 2 19:25:54.623000 audit[2385]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000388388 items=0 ppid=2375 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634383436616332353036353434666162323663313532393464623863 Oct 2 19:25:54.623000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:25:54.623000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:54.623000 audit: BPF prog-id=123 op=LOAD Oct 2 19:25:54.623000 audit[2385]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000388798 items=0 ppid=2375 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:54.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634383436616332353036353434666162323663313532393464623863 Oct 2 19:25:54.645911 env[1103]: time="2023-10-02T19:25:54.645795597Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-8ndwn,Uid:aa30c05d-8627-422d-a510-f2d1401b594f,Namespace:kube-system,Attempt:0,} returns sandbox id \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\"" Oct 2 19:25:54.646489 kubelet[2029]: E1002 19:25:54.646464 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:54.751760 kubelet[2029]: I1002 19:25:54.751719 2029 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-wrxhv" podStartSLOduration=1.7516847 pod.CreationTimestamp="2023-10-02 19:25:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:25:54.751525127 +0000 UTC m=+15.434955542" watchObservedRunningTime="2023-10-02 19:25:54.7516847 +0000 UTC m=+15.435115094" Oct 2 19:25:55.462667 kubelet[2029]: E1002 19:25:55.462633 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:55.981991 env[1103]: time="2023-10-02T19:25:55.981896938Z" level=error msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" failed" error="failed to pull and unpack image \"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/sha256/3e/3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T192555Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=0d4901186d6a5436b58e604df882fdb9afcebda0b523832ea16f1971b5a92584&cf_sign=QRREtH%2BdubOctxiCDSfVszyi07%2ByGeauRxSZrYx7%2Foy%2FEU3eDsgD1C%2BySMGG28tvwI7gYQYBhWUED4YXr0Z8q0%2FVMTUb7DofeCG0HHmdxsvov5OM4H%2FhaFsGkVacQLueO8roZFwCLpzBsD0Hg5dzmIY2p8Xx%2FJqRiOzKwheY1pXaV1GiafASst2J%2BBZTZ%2BeDuDQz0t4fzXbuX8lV7HcAu8%2F924Z7RVUWULoaonUmi6vWZD6PlxOOrWTheSqJ8dfjUlru6zz%2BqLBjhjjuqoYqN3WV%2BUQPxG5QCTOqbgFPEtSIzXbCHGDtrtrzSAD%2FtN4lQRySlm1QJJwKzdLK3M9leg%3D%3D&cf_expiry=1696275355®ion=us-east-1\": dial tcp: lookup cdn03.quay.io: no such host" Oct 2 19:25:55.983385 kubelet[2029]: E1002 19:25:55.982204 2029 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/sha256/3e/3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T192555Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=0d4901186d6a5436b58e604df882fdb9afcebda0b523832ea16f1971b5a92584&cf_sign=QRREtH%2BdubOctxiCDSfVszyi07%2ByGeauRxSZrYx7%2Foy%2FEU3eDsgD1C%2BySMGG28tvwI7gYQYBhWUED4YXr0Z8q0%2FVMTUb7DofeCG0HHmdxsvov5OM4H%2FhaFsGkVacQLueO8roZFwCLpzBsD0Hg5dzmIY2p8Xx%2FJqRiOzKwheY1pXaV1GiafASst2J%2BBZTZ%2BeDuDQz0t4fzXbuX8lV7HcAu8%2F924Z7RVUWULoaonUmi6vWZD6PlxOOrWTheSqJ8dfjUlru6zz%2BqLBjhjjuqoYqN3WV%2BUQPxG5QCTOqbgFPEtSIzXbCHGDtrtrzSAD%2FtN4lQRySlm1QJJwKzdLK3M9leg%3D%3D&cf_expiry=1696275355®ion=us-east-1\": dial tcp: lookup cdn03.quay.io: no such host" image="quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5" Oct 2 19:25:55.983531 kubelet[2029]: E1002 19:25:55.982267 2029 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/sha256/3e/3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T192555Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=0d4901186d6a5436b58e604df882fdb9afcebda0b523832ea16f1971b5a92584&cf_sign=QRREtH%2BdubOctxiCDSfVszyi07%2ByGeauRxSZrYx7%2Foy%2FEU3eDsgD1C%2BySMGG28tvwI7gYQYBhWUED4YXr0Z8q0%2FVMTUb7DofeCG0HHmdxsvov5OM4H%2FhaFsGkVacQLueO8roZFwCLpzBsD0Hg5dzmIY2p8Xx%2FJqRiOzKwheY1pXaV1GiafASst2J%2BBZTZ%2BeDuDQz0t4fzXbuX8lV7HcAu8%2F924Z7RVUWULoaonUmi6vWZD6PlxOOrWTheSqJ8dfjUlru6zz%2BqLBjhjjuqoYqN3WV%2BUQPxG5QCTOqbgFPEtSIzXbCHGDtrtrzSAD%2FtN4lQRySlm1QJJwKzdLK3M9leg%3D%3D&cf_expiry=1696275355®ion=us-east-1\": dial tcp: lookup cdn03.quay.io: no such host" image="quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5" Oct 2 19:25:55.983531 kubelet[2029]: E1002 19:25:55.982547 2029 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:25:55.983531 kubelet[2029]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:25:55.983531 kubelet[2029]: rm /hostbin/cilium-mount Oct 2 19:25:55.983699 env[1103]: time="2023-10-02T19:25:55.983510705Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:25:55.983734 kubelet[2029]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-5kv6x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5": failed to copy: httpReadSeeker: failed open: failed to do request: Get "https://cdn03.quay.io/sha256/3e/3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T192555Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=0d4901186d6a5436b58e604df882fdb9afcebda0b523832ea16f1971b5a92584&cf_sign=QRREtH%2BdubOctxiCDSfVszyi07%2ByGeauRxSZrYx7%2Foy%2FEU3eDsgD1C%2BySMGG28tvwI7gYQYBhWUED4YXr0Z8q0%2FVMTUb7DofeCG0HHmdxsvov5OM4H%2FhaFsGkVacQLueO8roZFwCLpzBsD0Hg5dzmIY2p8Xx%2FJqRiOzKwheY1pXaV1GiafASst2J%2BBZTZ%2BeDuDQz0t4fzXbuX8lV7HcAu8%2F924Z7RVUWULoaonUmi6vWZD6PlxOOrWTheSqJ8dfjUlru6zz%2BqLBjhjjuqoYqN3WV%2BUQPxG5QCTOqbgFPEtSIzXbCHGDtrtrzSAD%2FtN4lQRySlm1QJJwKzdLK3M9leg%3D%3D&cf_expiry=1696275355®ion=us-east-1": dial tcp: lookup cdn03.quay.io: no such host Oct 2 19:25:55.983734 kubelet[2029]: E1002 19:25:55.982618 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\\\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \\\"https://cdn03.quay.io/sha256/3e/3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T192555Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=0d4901186d6a5436b58e604df882fdb9afcebda0b523832ea16f1971b5a92584&cf_sign=QRREtH%2BdubOctxiCDSfVszyi07%2ByGeauRxSZrYx7%2Foy%2FEU3eDsgD1C%2BySMGG28tvwI7gYQYBhWUED4YXr0Z8q0%2FVMTUb7DofeCG0HHmdxsvov5OM4H%2FhaFsGkVacQLueO8roZFwCLpzBsD0Hg5dzmIY2p8Xx%2FJqRiOzKwheY1pXaV1GiafASst2J%2BBZTZ%2BeDuDQz0t4fzXbuX8lV7HcAu8%2F924Z7RVUWULoaonUmi6vWZD6PlxOOrWTheSqJ8dfjUlru6zz%2BqLBjhjjuqoYqN3WV%2BUQPxG5QCTOqbgFPEtSIzXbCHGDtrtrzSAD%2FtN4lQRySlm1QJJwKzdLK3M9leg%3D%3D&cf_expiry=1696275355®ion=us-east-1\\\": dial tcp: lookup cdn03.quay.io: no such host\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:25:56.464687 kubelet[2029]: E1002 19:25:56.464087 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:56.465559 kubelet[2029]: E1002 19:25:56.465526 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with ImagePullBackOff: \"Back-off pulling image \\\"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\\\"\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:25:58.740247 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1239181432.mount: Deactivated successfully. Oct 2 19:25:59.501855 env[1103]: time="2023-10-02T19:25:59.501812732Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:59.503771 env[1103]: time="2023-10-02T19:25:59.503724376Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:59.505412 env[1103]: time="2023-10-02T19:25:59.505372884Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:59.506022 env[1103]: time="2023-10-02T19:25:59.505956866Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:25:59.508384 env[1103]: time="2023-10-02T19:25:59.508347935Z" level=info msg="CreateContainer within sandbox \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:25:59.520573 env[1103]: time="2023-10-02T19:25:59.520529735Z" level=info msg="CreateContainer within sandbox \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\"" Oct 2 19:25:59.521009 env[1103]: time="2023-10-02T19:25:59.520981056Z" level=info msg="StartContainer for \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\"" Oct 2 19:25:59.537022 systemd[1]: Started cri-containerd-e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892.scope. Oct 2 19:25:59.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.546704 kernel: kauditd_printk_skb: 348 callbacks suppressed Oct 2 19:25:59.546770 kernel: audit: type=1400 audit(1696274759.545:1073): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.551472 kernel: audit: type=1400 audit(1696274759.545:1074): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.551521 kernel: audit: type=1400 audit(1696274759.545:1075): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.556147 kernel: audit: type=1400 audit(1696274759.545:1076): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.556197 kernel: audit: type=1400 audit(1696274759.545:1077): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.560744 kernel: audit: type=1400 audit(1696274759.545:1078): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.560783 kernel: audit: type=1400 audit(1696274759.545:1079): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.565562 kernel: audit: type=1400 audit(1696274759.545:1080): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.565601 kernel: audit: type=1400 audit(1696274759.545:1081): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.570272 kernel: audit: type=1400 audit(1696274759.548:1082): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.548000 audit: BPF prog-id=124 op=LOAD Oct 2 19:25:59.549000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.549000 audit[2415]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2375 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:59.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536303536373334326439306336613463393030323039336433356539 Oct 2 19:25:59.549000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.549000 audit[2415]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2375 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:59.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536303536373334326439306336613463393030323039336433356539 Oct 2 19:25:59.549000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.549000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.549000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.549000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.549000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.549000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.549000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.549000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.549000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.549000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.549000 audit: BPF prog-id=125 op=LOAD Oct 2 19:25:59.549000 audit[2415]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003ad180 items=0 ppid=2375 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:59.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536303536373334326439306336613463393030323039336433356539 Oct 2 19:25:59.551000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.551000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.551000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.551000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.551000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.551000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.551000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.551000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.551000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.551000 audit: BPF prog-id=126 op=LOAD Oct 2 19:25:59.551000 audit[2415]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003ad1c8 items=0 ppid=2375 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:59.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536303536373334326439306336613463393030323039336433356539 Oct 2 19:25:59.553000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:25:59.553000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:25:59.553000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.553000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.553000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.553000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.553000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.553000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.553000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.553000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.553000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.553000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:59.553000 audit: BPF prog-id=127 op=LOAD Oct 2 19:25:59.553000 audit[2415]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003ad5d8 items=0 ppid=2375 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:59.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536303536373334326439306336613463393030323039336433356539 Oct 2 19:25:59.583808 env[1103]: time="2023-10-02T19:25:59.583772839Z" level=info msg="StartContainer for \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\" returns successfully" Oct 2 19:25:59.600000 audit[2426]: AVC avc: denied { map_create } for pid=2426 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c619 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c619 tclass=bpf permissive=0 Oct 2 19:25:59.600000 audit[2426]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c00062f7d0 a2=48 a3=c00062f7c0 items=0 ppid=2375 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c619 key=(null) Oct 2 19:25:59.600000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:26:00.470456 kubelet[2029]: E1002 19:26:00.470403 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:01.472096 kubelet[2029]: E1002 19:26:01.472061 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:09.430528 kubelet[2029]: E1002 19:26:09.430424 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:09.433599 env[1103]: time="2023-10-02T19:26:09.433562603Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:26:09.551444 kubelet[2029]: I1002 19:26:09.551398 2029 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" podStartSLOduration=-9.223372020303415e+09 pod.CreationTimestamp="2023-10-02 19:25:53 +0000 UTC" firstStartedPulling="2023-10-02 19:25:54.646925161 +0000 UTC m=+15.330355555" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:26:01.220675365 +0000 UTC m=+21.904105769" watchObservedRunningTime="2023-10-02 19:26:09.551360281 +0000 UTC m=+30.234790675" Oct 2 19:26:16.531013 systemd[1]: Started sshd@7-10.0.0.11:22-10.0.0.1:45110.service. Oct 2 19:26:16.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.11:22-10.0.0.1:45110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:16.532435 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:26:16.532496 kernel: audit: type=1130 audit(1696274776.530:1092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.11:22-10.0.0.1:45110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:16.571000 audit[2449]: USER_ACCT pid=2449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:16.583101 kernel: audit: type=1101 audit(1696274776.571:1093): pid=2449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:16.583153 kernel: audit: type=1103 audit(1696274776.574:1094): pid=2449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:16.583172 kernel: audit: type=1006 audit(1696274776.574:1095): pid=2449 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:26:16.583188 kernel: audit: type=1300 audit(1696274776.574:1095): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe2ff6a90 a2=3 a3=0 items=0 ppid=1 pid=2449 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:16.583210 kernel: audit: type=1327 audit(1696274776.574:1095): proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:16.574000 audit[2449]: CRED_ACQ pid=2449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:16.574000 audit[2449]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe2ff6a90 a2=3 a3=0 items=0 ppid=1 pid=2449 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:16.574000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:16.583402 sshd[2449]: Accepted publickey for core from 10.0.0.1 port 45110 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:26:16.575463 sshd[2449]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:26:16.580179 systemd[1]: Started session-8.scope. Oct 2 19:26:16.580548 systemd-logind[1094]: New session 8 of user core. Oct 2 19:26:16.584000 audit[2449]: USER_START pid=2449 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:16.587000 audit[2451]: CRED_ACQ pid=2451 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:16.590093 kernel: audit: type=1105 audit(1696274776.584:1096): pid=2449 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:16.590136 kernel: audit: type=1103 audit(1696274776.587:1097): pid=2451 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:16.787608 sshd[2449]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:16.794300 kernel: audit: type=1106 audit(1696274776.788:1098): pid=2449 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:16.794388 kernel: audit: type=1104 audit(1696274776.788:1099): pid=2449 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:16.788000 audit[2449]: USER_END pid=2449 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:16.788000 audit[2449]: CRED_DISP pid=2449 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:16.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.11:22-10.0.0.1:45110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:16.793360 systemd[1]: sshd@7-10.0.0.11:22-10.0.0.1:45110.service: Deactivated successfully. Oct 2 19:26:16.793985 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:26:16.794596 systemd-logind[1094]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:26:16.795288 systemd-logind[1094]: Removed session 8. Oct 2 19:26:18.799066 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1063215997.mount: Deactivated successfully. Oct 2 19:26:19.499454 kubelet[2029]: I1002 19:26:19.499427 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:19.499818 kubelet[2029]: I1002 19:26:19.499466 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:26:19.506212 kubelet[2029]: I1002 19:26:19.506186 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:26:19.507534 kubelet[2029]: I1002 19:26:19.507494 2029 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a" size=14837849 Oct 2 19:26:19.507999 env[1103]: time="2023-10-02T19:26:19.507949260Z" level=info msg="RemoveImage \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:26:19.664415 env[1103]: time="2023-10-02T19:26:19.664364527Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.9.3,XXX_unrecognized:[],}" Oct 2 19:26:19.672924 env[1103]: time="2023-10-02T19:26:19.672889338Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,XXX_unrecognized:[],}" Oct 2 19:26:19.674763 env[1103]: time="2023-10-02T19:26:19.674730567Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,XXX_unrecognized:[],}" Oct 2 19:26:19.689268 env[1103]: time="2023-10-02T19:26:19.689207046Z" level=info msg="RemoveImage \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\" returns successfully" Oct 2 19:26:19.689586 kubelet[2029]: I1002 19:26:19.689553 2029 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" size=301773 Oct 2 19:26:19.689830 env[1103]: time="2023-10-02T19:26:19.689793968Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\"" Oct 2 19:26:19.691002 env[1103]: time="2023-10-02T19:26:19.690967973Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:26:19.715181 env[1103]: time="2023-10-02T19:26:19.715130545Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:26:19.716522 env[1103]: time="2023-10-02T19:26:19.716492683Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,XXX_unrecognized:[],}" Oct 2 19:26:19.719258 env[1103]: time="2023-10-02T19:26:19.719222741Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\" returns successfully" Oct 2 19:26:19.719535 kubelet[2029]: I1002 19:26:19.719512 2029 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7" size=102542580 Oct 2 19:26:19.719746 env[1103]: time="2023-10-02T19:26:19.719716578Z" level=info msg="RemoveImage \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:26:19.721168 env[1103]: time="2023-10-02T19:26:19.721087563Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.6-0,XXX_unrecognized:[],}" Oct 2 19:26:19.722520 env[1103]: time="2023-10-02T19:26:19.722489897Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,XXX_unrecognized:[],}" Oct 2 19:26:19.723358 env[1103]: time="2023-10-02T19:26:19.723309246Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,XXX_unrecognized:[],}" Oct 2 19:26:19.780853 env[1103]: time="2023-10-02T19:26:19.780199367Z" level=info msg="RemoveImage \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\" returns successfully" Oct 2 19:26:19.789591 kubelet[2029]: I1002 19:26:19.789565 2029 eviction_manager.go:352] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:26:23.639362 env[1103]: time="2023-10-02T19:26:23.639282704Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:23.673451 env[1103]: time="2023-10-02T19:26:23.673379863Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:23.690837 env[1103]: time="2023-10-02T19:26:23.690772638Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:23.691306 env[1103]: time="2023-10-02T19:26:23.691274300Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:26:23.693235 env[1103]: time="2023-10-02T19:26:23.692920271Z" level=info msg="CreateContainer within sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:26:23.835235 env[1103]: time="2023-10-02T19:26:23.835161424Z" level=info msg="CreateContainer within sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4\"" Oct 2 19:26:23.835735 env[1103]: time="2023-10-02T19:26:23.835709303Z" level=info msg="StartContainer for \"377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4\"" Oct 2 19:26:23.850469 systemd[1]: Started cri-containerd-377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4.scope. Oct 2 19:26:23.857583 systemd[1]: cri-containerd-377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4.scope: Deactivated successfully. Oct 2 19:26:23.857800 systemd[1]: Stopped cri-containerd-377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4.scope. Oct 2 19:26:23.861132 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4-rootfs.mount: Deactivated successfully. Oct 2 19:26:24.724509 env[1103]: time="2023-10-02T19:26:24.724425526Z" level=info msg="shim disconnected" id=377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4 Oct 2 19:26:24.724509 env[1103]: time="2023-10-02T19:26:24.724483004Z" level=warning msg="cleaning up after shim disconnected" id=377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4 namespace=k8s.io Oct 2 19:26:24.724509 env[1103]: time="2023-10-02T19:26:24.724493855Z" level=info msg="cleaning up dead shim" Oct 2 19:26:24.730368 env[1103]: time="2023-10-02T19:26:24.730320223Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:26:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2492 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:26:24Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:26:24.730614 env[1103]: time="2023-10-02T19:26:24.730531620Z" level=error msg="copy shim log" error="read /proc/self/fd/98: file already closed" Oct 2 19:26:24.730806 env[1103]: time="2023-10-02T19:26:24.730763345Z" level=error msg="Failed to pipe stdout of container \"377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4\"" error="reading from a closed fifo" Oct 2 19:26:24.730944 env[1103]: time="2023-10-02T19:26:24.730798200Z" level=error msg="Failed to pipe stderr of container \"377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4\"" error="reading from a closed fifo" Oct 2 19:26:24.735874 env[1103]: time="2023-10-02T19:26:24.735827592Z" level=error msg="StartContainer for \"377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:26:24.736106 kubelet[2029]: E1002 19:26:24.736070 2029 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4" Oct 2 19:26:24.736386 kubelet[2029]: E1002 19:26:24.736208 2029 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:26:24.736386 kubelet[2029]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:26:24.736386 kubelet[2029]: rm /hostbin/cilium-mount Oct 2 19:26:24.736386 kubelet[2029]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-5kv6x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:26:24.736386 kubelet[2029]: E1002 19:26:24.736251 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:26:25.515147 kubelet[2029]: E1002 19:26:25.515110 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:25.516942 env[1103]: time="2023-10-02T19:26:25.516905987Z" level=info msg="CreateContainer within sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:26:25.647495 env[1103]: time="2023-10-02T19:26:25.647444184Z" level=info msg="CreateContainer within sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449\"" Oct 2 19:26:25.648187 env[1103]: time="2023-10-02T19:26:25.648160058Z" level=info msg="StartContainer for \"4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449\"" Oct 2 19:26:25.664908 systemd[1]: Started cri-containerd-4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449.scope. Oct 2 19:26:25.674165 systemd[1]: cri-containerd-4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449.scope: Deactivated successfully. Oct 2 19:26:25.674503 systemd[1]: Stopped cri-containerd-4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449.scope. Oct 2 19:26:25.688243 env[1103]: time="2023-10-02T19:26:25.688175218Z" level=info msg="shim disconnected" id=4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449 Oct 2 19:26:25.688453 env[1103]: time="2023-10-02T19:26:25.688249807Z" level=warning msg="cleaning up after shim disconnected" id=4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449 namespace=k8s.io Oct 2 19:26:25.688453 env[1103]: time="2023-10-02T19:26:25.688261469Z" level=info msg="cleaning up dead shim" Oct 2 19:26:25.694445 env[1103]: time="2023-10-02T19:26:25.694401967Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:26:25Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2527 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:26:25Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:26:25.694685 env[1103]: time="2023-10-02T19:26:25.694630496Z" level=error msg="copy shim log" error="read /proc/self/fd/55: file already closed" Oct 2 19:26:25.694889 env[1103]: time="2023-10-02T19:26:25.694816996Z" level=error msg="Failed to pipe stdout of container \"4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449\"" error="reading from a closed fifo" Oct 2 19:26:25.697140 env[1103]: time="2023-10-02T19:26:25.697102597Z" level=error msg="Failed to pipe stderr of container \"4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449\"" error="reading from a closed fifo" Oct 2 19:26:25.884066 env[1103]: time="2023-10-02T19:26:25.883910888Z" level=error msg="StartContainer for \"4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:26:25.884480 kubelet[2029]: E1002 19:26:25.884231 2029 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449" Oct 2 19:26:25.884480 kubelet[2029]: E1002 19:26:25.884427 2029 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:26:25.884480 kubelet[2029]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:26:25.884480 kubelet[2029]: rm /hostbin/cilium-mount Oct 2 19:26:25.884480 kubelet[2029]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-5kv6x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:26:25.884480 kubelet[2029]: E1002 19:26:25.884478 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:26:26.518214 kubelet[2029]: I1002 19:26:26.518177 2029 scope.go:115] "RemoveContainer" containerID="377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4" Oct 2 19:26:26.518577 kubelet[2029]: I1002 19:26:26.518558 2029 scope.go:115] "RemoveContainer" containerID="377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4" Oct 2 19:26:26.519308 env[1103]: time="2023-10-02T19:26:26.519274138Z" level=info msg="RemoveContainer for \"377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4\"" Oct 2 19:26:26.519947 env[1103]: time="2023-10-02T19:26:26.519918928Z" level=info msg="RemoveContainer for \"377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4\"" Oct 2 19:26:26.520007 env[1103]: time="2023-10-02T19:26:26.519978961Z" level=error msg="RemoveContainer for \"377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4\" failed" error="failed to set removing state for container \"377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4\": container is already in removing state" Oct 2 19:26:26.520095 kubelet[2029]: E1002 19:26:26.520079 2029 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4\": container is already in removing state" containerID="377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4" Oct 2 19:26:26.520157 kubelet[2029]: E1002 19:26:26.520111 2029 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4": container is already in removing state; Skipping pod "cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)" Oct 2 19:26:26.520192 kubelet[2029]: E1002 19:26:26.520162 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:26.520388 kubelet[2029]: E1002 19:26:26.520377 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:26:26.642759 systemd[1]: run-containerd-runc-k8s.io-4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449-runc.wxrTXF.mount: Deactivated successfully. Oct 2 19:26:26.642845 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449-rootfs.mount: Deactivated successfully. Oct 2 19:26:26.780685 env[1103]: time="2023-10-02T19:26:26.779715128Z" level=info msg="RemoveContainer for \"377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4\" returns successfully" Oct 2 19:26:26.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.11:22-10.0.0.1:48778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:26.791518 systemd[1]: Started sshd@8-10.0.0.11:22-10.0.0.1:48778.service. Oct 2 19:26:26.792468 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:26:26.792531 kernel: audit: type=1130 audit(1696274786.791:1101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.11:22-10.0.0.1:48778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:26.826000 audit[2540]: USER_ACCT pid=2540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:26.826805 sshd[2540]: Accepted publickey for core from 10.0.0.1 port 48778 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:26:26.828000 audit[2540]: CRED_ACQ pid=2540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:26.829555 sshd[2540]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:26:26.831710 kernel: audit: type=1101 audit(1696274786.826:1102): pid=2540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:26.831755 kernel: audit: type=1103 audit(1696274786.828:1103): pid=2540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:26.831772 kernel: audit: type=1006 audit(1696274786.828:1104): pid=2540 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:26:26.832248 systemd-logind[1094]: New session 9 of user core. Oct 2 19:26:26.832913 systemd[1]: Started session-9.scope. Oct 2 19:26:26.828000 audit[2540]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6153a4e0 a2=3 a3=0 items=0 ppid=1 pid=2540 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:26.836610 kernel: audit: type=1300 audit(1696274786.828:1104): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6153a4e0 a2=3 a3=0 items=0 ppid=1 pid=2540 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:26.836649 kernel: audit: type=1327 audit(1696274786.828:1104): proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:26.828000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:26.837000 audit[2540]: USER_START pid=2540 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:26.841007 kernel: audit: type=1105 audit(1696274786.837:1105): pid=2540 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:26.841059 kernel: audit: type=1103 audit(1696274786.838:1106): pid=2542 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:26.838000 audit[2542]: CRED_ACQ pid=2542 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:27.193186 sshd[2540]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:27.193000 audit[2540]: USER_END pid=2540 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:27.195209 systemd[1]: sshd@8-10.0.0.11:22-10.0.0.1:48778.service: Deactivated successfully. Oct 2 19:26:27.195847 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:26:27.196309 systemd-logind[1094]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:26:27.193000 audit[2540]: CRED_DISP pid=2540 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:27.196940 systemd-logind[1094]: Removed session 9. Oct 2 19:26:27.198897 kernel: audit: type=1106 audit(1696274787.193:1107): pid=2540 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:27.198934 kernel: audit: type=1104 audit(1696274787.193:1108): pid=2540 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:27.195000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.11:22-10.0.0.1:48778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:27.829365 kubelet[2029]: W1002 19:26:27.829316 2029 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb898b2a7_183d_4299_b143_f9d84d2b8c98.slice/cri-containerd-377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4.scope WatchSource:0}: container "377157f96bec75c84eaa3a31e0201ddc20db14f293a46a1a81dacf0116e838d4" in namespace "k8s.io": not found Oct 2 19:26:30.935840 kubelet[2029]: W1002 19:26:30.935762 2029 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb898b2a7_183d_4299_b143_f9d84d2b8c98.slice/cri-containerd-4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449.scope WatchSource:0}: task 4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449 not found: not found Oct 2 19:26:30.947309 kubelet[2029]: I1002 19:26:30.947281 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:30.952848 kubelet[2029]: I1002 19:26:30.947317 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:26:30.952848 kubelet[2029]: I1002 19:26:30.948405 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:26:30.957111 kubelet[2029]: I1002 19:26:30.957087 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:30.957172 kubelet[2029]: I1002 19:26:30.957161 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:26:30.957199 kubelet[2029]: E1002 19:26:30.957187 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:26:30.957225 kubelet[2029]: E1002 19:26:30.957201 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:26:30.957225 kubelet[2029]: E1002 19:26:30.957211 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:26:30.957225 kubelet[2029]: E1002 19:26:30.957219 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:26:30.957225 kubelet[2029]: E1002 19:26:30.957227 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:26:30.957362 kubelet[2029]: E1002 19:26:30.957237 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:26:30.957362 kubelet[2029]: I1002 19:26:30.957246 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:26:35.803000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:35.804834 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:26:35.804879 kernel: audit: type=1400 audit(1696274795.803:1110): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:35.803000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a86780 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:26:35.812373 kernel: audit: type=1300 audit(1696274795.803:1110): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a86780 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:26:35.812436 kernel: audit: type=1327 audit(1696274795.803:1110): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:35.803000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:35.803000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:35.820419 kernel: audit: type=1400 audit(1696274795.803:1111): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:35.820472 kernel: audit: type=1300 audit(1696274795.803:1111): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000f30de0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:26:35.803000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000f30de0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:26:35.803000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:35.827774 kernel: audit: type=1327 audit(1696274795.803:1111): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:36.438000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:36.438000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c0031a4d60 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:26:36.444675 kernel: audit: type=1400 audit(1696274796.438:1112): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:36.444717 kernel: audit: type=1300 audit(1696274796.438:1112): arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c0031a4d60 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:26:36.444742 kernel: audit: type=1327 audit(1696274796.438:1112): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:26:36.438000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:26:36.447356 kernel: audit: type=1400 audit(1696274796.438:1113): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:36.438000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:36.438000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=59 a1=c00acec870 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:26:36.438000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:26:36.438000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:36.438000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00ab493e0 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:26:36.438000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:26:36.441000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:36.441000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00acec8a0 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:26:36.441000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:26:36.449000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:36.449000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c004111fe0 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:26:36.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:26:36.449000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:36.449000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00ab49440 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:26:36.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:26:37.197427 systemd[1]: Started sshd@9-10.0.0.11:22-10.0.0.1:45716.service. Oct 2 19:26:37.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.11:22-10.0.0.1:45716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:37.231000 audit[2554]: USER_ACCT pid=2554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:37.232099 sshd[2554]: Accepted publickey for core from 10.0.0.1 port 45716 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:26:37.232000 audit[2554]: CRED_ACQ pid=2554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:37.232000 audit[2554]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbc5666f0 a2=3 a3=0 items=0 ppid=1 pid=2554 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:37.232000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:37.233449 sshd[2554]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:26:37.237725 systemd-logind[1094]: New session 10 of user core. Oct 2 19:26:37.238948 systemd[1]: Started session-10.scope. Oct 2 19:26:37.243000 audit[2554]: USER_START pid=2554 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:37.244000 audit[2556]: CRED_ACQ pid=2556 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:37.340217 sshd[2554]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:37.340000 audit[2554]: USER_END pid=2554 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:37.340000 audit[2554]: CRED_DISP pid=2554 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:37.342495 systemd[1]: sshd@9-10.0.0.11:22-10.0.0.1:45716.service: Deactivated successfully. Oct 2 19:26:37.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.11:22-10.0.0.1:45716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:37.343129 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:26:37.343641 systemd-logind[1094]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:26:37.344237 systemd-logind[1094]: Removed session 10. Oct 2 19:26:39.431912 kubelet[2029]: E1002 19:26:39.431883 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:39.434550 env[1103]: time="2023-10-02T19:26:39.434518503Z" level=info msg="CreateContainer within sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:26:39.448248 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1891166792.mount: Deactivated successfully. Oct 2 19:26:39.449827 env[1103]: time="2023-10-02T19:26:39.449791118Z" level=info msg="CreateContainer within sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c\"" Oct 2 19:26:39.450403 env[1103]: time="2023-10-02T19:26:39.450362034Z" level=info msg="StartContainer for \"982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c\"" Oct 2 19:26:39.463495 systemd[1]: Started cri-containerd-982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c.scope. Oct 2 19:26:39.471695 systemd[1]: cri-containerd-982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c.scope: Deactivated successfully. Oct 2 19:26:39.472015 systemd[1]: Stopped cri-containerd-982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c.scope. Oct 2 19:26:39.479007 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c-rootfs.mount: Deactivated successfully. Oct 2 19:26:39.485397 env[1103]: time="2023-10-02T19:26:39.485347596Z" level=info msg="shim disconnected" id=982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c Oct 2 19:26:39.485471 env[1103]: time="2023-10-02T19:26:39.485400378Z" level=warning msg="cleaning up after shim disconnected" id=982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c namespace=k8s.io Oct 2 19:26:39.485471 env[1103]: time="2023-10-02T19:26:39.485408605Z" level=info msg="cleaning up dead shim" Oct 2 19:26:39.491545 env[1103]: time="2023-10-02T19:26:39.491502850Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:26:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2592 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:26:39Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:26:39.491783 env[1103]: time="2023-10-02T19:26:39.491733156Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:26:39.491958 env[1103]: time="2023-10-02T19:26:39.491914207Z" level=error msg="Failed to pipe stderr of container \"982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c\"" error="reading from a closed fifo" Oct 2 19:26:39.493466 env[1103]: time="2023-10-02T19:26:39.493418652Z" level=error msg="Failed to pipe stdout of container \"982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c\"" error="reading from a closed fifo" Oct 2 19:26:39.497849 env[1103]: time="2023-10-02T19:26:39.497812693Z" level=error msg="StartContainer for \"982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:26:39.498015 kubelet[2029]: E1002 19:26:39.497974 2029 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c" Oct 2 19:26:39.498200 kubelet[2029]: E1002 19:26:39.498073 2029 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:26:39.498200 kubelet[2029]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:26:39.498200 kubelet[2029]: rm /hostbin/cilium-mount Oct 2 19:26:39.498200 kubelet[2029]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-5kv6x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:26:39.498200 kubelet[2029]: E1002 19:26:39.498104 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:26:39.539501 kubelet[2029]: I1002 19:26:39.539478 2029 scope.go:115] "RemoveContainer" containerID="4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449" Oct 2 19:26:39.539772 kubelet[2029]: I1002 19:26:39.539752 2029 scope.go:115] "RemoveContainer" containerID="4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449" Oct 2 19:26:39.540829 env[1103]: time="2023-10-02T19:26:39.540799365Z" level=info msg="RemoveContainer for \"4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449\"" Oct 2 19:26:39.541880 env[1103]: time="2023-10-02T19:26:39.541839090Z" level=info msg="RemoveContainer for \"4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449\"" Oct 2 19:26:39.541978 env[1103]: time="2023-10-02T19:26:39.541948831Z" level=error msg="RemoveContainer for \"4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449\" failed" error="failed to set removing state for container \"4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449\": container is already in removing state" Oct 2 19:26:39.542126 kubelet[2029]: E1002 19:26:39.542094 2029 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449\": container is already in removing state" containerID="4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449" Oct 2 19:26:39.542126 kubelet[2029]: E1002 19:26:39.542126 2029 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449": container is already in removing state; Skipping pod "cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)" Oct 2 19:26:39.542228 kubelet[2029]: E1002 19:26:39.542170 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:39.542398 kubelet[2029]: E1002 19:26:39.542382 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:26:39.544240 env[1103]: time="2023-10-02T19:26:39.544205403Z" level=info msg="RemoveContainer for \"4b95a4ed489f353d4a78d35e751f859f4da606f34351c625da1bfefae0c89449\" returns successfully" Oct 2 19:26:42.590593 kubelet[2029]: W1002 19:26:42.590549 2029 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb898b2a7_183d_4299_b143_f9d84d2b8c98.slice/cri-containerd-982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c.scope WatchSource:0}: task 982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c not found: not found Oct 2 19:26:42.601011 kubelet[2029]: I1002 19:26:42.600991 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:42.601011 kubelet[2029]: I1002 19:26:42.601015 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:26:42.602037 kubelet[2029]: I1002 19:26:42.602014 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:26:42.610546 kubelet[2029]: I1002 19:26:42.610526 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:42.610690 kubelet[2029]: I1002 19:26:42.610586 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:26:42.610690 kubelet[2029]: E1002 19:26:42.610606 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:26:42.610690 kubelet[2029]: E1002 19:26:42.610616 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:26:42.610690 kubelet[2029]: E1002 19:26:42.610625 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:26:42.610690 kubelet[2029]: E1002 19:26:42.610632 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:26:42.610690 kubelet[2029]: E1002 19:26:42.610641 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:26:42.610690 kubelet[2029]: E1002 19:26:42.610649 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:26:42.610690 kubelet[2029]: I1002 19:26:42.610658 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:26:47.343989 systemd[1]: Started sshd@10-10.0.0.11:22-10.0.0.1:57592.service. Oct 2 19:26:47.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.11:22-10.0.0.1:57592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:47.344824 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:26:47.344880 kernel: audit: type=1130 audit(1696274807.342:1127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.11:22-10.0.0.1:57592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:47.375000 audit[2605]: USER_ACCT pid=2605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:47.377270 sshd[2605]: Accepted publickey for core from 10.0.0.1 port 57592 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:26:47.378000 audit[2605]: CRED_ACQ pid=2605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:47.380575 sshd[2605]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:26:47.382301 kernel: audit: type=1101 audit(1696274807.375:1128): pid=2605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:47.382384 kernel: audit: type=1103 audit(1696274807.378:1129): pid=2605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:47.382426 kernel: audit: type=1006 audit(1696274807.378:1130): pid=2605 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:26:47.378000 audit[2605]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc8aa3a60 a2=3 a3=0 items=0 ppid=1 pid=2605 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:47.385199 systemd-logind[1094]: New session 11 of user core. Oct 2 19:26:47.386697 kernel: audit: type=1300 audit(1696274807.378:1130): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc8aa3a60 a2=3 a3=0 items=0 ppid=1 pid=2605 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:47.386732 kernel: audit: type=1327 audit(1696274807.378:1130): proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:47.378000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:47.386293 systemd[1]: Started session-11.scope. Oct 2 19:26:47.389000 audit[2605]: USER_START pid=2605 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:47.389000 audit[2607]: CRED_ACQ pid=2607 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:47.396103 kernel: audit: type=1105 audit(1696274807.389:1131): pid=2605 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:47.396155 kernel: audit: type=1103 audit(1696274807.389:1132): pid=2607 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:47.489862 sshd[2605]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:47.489000 audit[2605]: USER_END pid=2605 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:47.491899 systemd[1]: sshd@10-10.0.0.11:22-10.0.0.1:57592.service: Deactivated successfully. Oct 2 19:26:47.492703 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:26:47.493235 systemd-logind[1094]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:26:47.493933 systemd-logind[1094]: Removed session 11. Oct 2 19:26:47.489000 audit[2605]: CRED_DISP pid=2605 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:47.496444 kernel: audit: type=1106 audit(1696274807.489:1133): pid=2605 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:47.496493 kernel: audit: type=1104 audit(1696274807.489:1134): pid=2605 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:47.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.11:22-10.0.0.1:57592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:52.621623 kubelet[2029]: I1002 19:26:52.621591 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:52.621623 kubelet[2029]: I1002 19:26:52.621624 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:26:52.622788 kubelet[2029]: I1002 19:26:52.622757 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:26:52.631362 kubelet[2029]: I1002 19:26:52.631326 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:52.631568 kubelet[2029]: I1002 19:26:52.631397 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:26:52.631568 kubelet[2029]: E1002 19:26:52.631417 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:26:52.631568 kubelet[2029]: E1002 19:26:52.631437 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:26:52.631568 kubelet[2029]: E1002 19:26:52.631448 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:26:52.631568 kubelet[2029]: E1002 19:26:52.631456 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:26:52.631568 kubelet[2029]: E1002 19:26:52.631464 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:26:52.631568 kubelet[2029]: E1002 19:26:52.631472 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:26:52.631568 kubelet[2029]: I1002 19:26:52.631480 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:26:52.819000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:52.819756 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:26:52.819808 kernel: audit: type=1400 audit(1696274812.819:1136): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:52.819000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ba0640 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:26:52.825367 kernel: audit: type=1300 audit(1696274812.819:1136): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ba0640 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:26:52.825413 kernel: audit: type=1327 audit(1696274812.819:1136): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:52.819000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:52.820000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:52.830444 kernel: audit: type=1400 audit(1696274812.820:1137): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:52.830495 kernel: audit: type=1300 audit(1696274812.820:1137): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000de19a0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:26:52.820000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000de19a0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:26:52.820000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:52.835988 kernel: audit: type=1327 audit(1696274812.820:1137): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:52.836027 kernel: audit: type=1400 audit(1696274812.821:1138): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:52.821000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:52.821000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000de19c0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:26:52.841692 kernel: audit: type=1300 audit(1696274812.821:1138): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000de19c0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:26:52.841733 kernel: audit: type=1327 audit(1696274812.821:1138): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:52.821000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:52.844464 kernel: audit: type=1400 audit(1696274812.821:1139): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:52.821000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:52.821000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ba0880 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:26:52.821000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:54.430493 kubelet[2029]: E1002 19:26:54.430428 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:54.430888 kubelet[2029]: E1002 19:26:54.430627 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:26:56.431171 kubelet[2029]: E1002 19:26:56.431133 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:57.493619 systemd[1]: Started sshd@11-10.0.0.11:22-10.0.0.1:53508.service. Oct 2 19:26:57.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.11:22-10.0.0.1:53508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:57.526000 audit[2621]: USER_ACCT pid=2621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:57.527099 sshd[2621]: Accepted publickey for core from 10.0.0.1 port 53508 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:26:57.527000 audit[2621]: CRED_ACQ pid=2621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:57.527000 audit[2621]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe260d0e20 a2=3 a3=0 items=0 ppid=1 pid=2621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:57.527000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:57.527920 sshd[2621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:26:57.530884 systemd-logind[1094]: New session 12 of user core. Oct 2 19:26:57.531752 systemd[1]: Started session-12.scope. Oct 2 19:26:57.534000 audit[2621]: USER_START pid=2621 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:57.535000 audit[2623]: CRED_ACQ pid=2623 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:57.626389 sshd[2621]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:57.626000 audit[2621]: USER_END pid=2621 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:57.627000 audit[2621]: CRED_DISP pid=2621 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:57.628326 systemd[1]: sshd@11-10.0.0.11:22-10.0.0.1:53508.service: Deactivated successfully. Oct 2 19:26:57.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.11:22-10.0.0.1:53508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:57.628999 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:26:57.629708 systemd-logind[1094]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:26:57.630347 systemd-logind[1094]: Removed session 12. Oct 2 19:27:00.431113 kubelet[2029]: E1002 19:27:00.431088 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:02.642766 kubelet[2029]: I1002 19:27:02.642738 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:02.642766 kubelet[2029]: I1002 19:27:02.642768 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:27:02.643950 kubelet[2029]: I1002 19:27:02.643931 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:27:02.652277 kubelet[2029]: I1002 19:27:02.652250 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:02.652362 kubelet[2029]: I1002 19:27:02.652330 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:27:02.652362 kubelet[2029]: E1002 19:27:02.652362 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:27:02.652435 kubelet[2029]: E1002 19:27:02.652374 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:27:02.652435 kubelet[2029]: E1002 19:27:02.652383 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:27:02.652435 kubelet[2029]: E1002 19:27:02.652392 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:27:02.652435 kubelet[2029]: E1002 19:27:02.652401 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:27:02.652435 kubelet[2029]: E1002 19:27:02.652409 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:27:02.652435 kubelet[2029]: I1002 19:27:02.652419 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:27:05.430928 kubelet[2029]: E1002 19:27:05.430881 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:05.432748 env[1103]: time="2023-10-02T19:27:05.432708284Z" level=info msg="CreateContainer within sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:27:05.445567 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4079419758.mount: Deactivated successfully. Oct 2 19:27:05.447550 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1768175217.mount: Deactivated successfully. Oct 2 19:27:05.448980 env[1103]: time="2023-10-02T19:27:05.448935400Z" level=info msg="CreateContainer within sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3\"" Oct 2 19:27:05.449421 env[1103]: time="2023-10-02T19:27:05.449396679Z" level=info msg="StartContainer for \"d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3\"" Oct 2 19:27:05.462792 systemd[1]: Started cri-containerd-d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3.scope. Oct 2 19:27:05.470823 systemd[1]: cri-containerd-d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3.scope: Deactivated successfully. Oct 2 19:27:05.471061 systemd[1]: Stopped cri-containerd-d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3.scope. Oct 2 19:27:05.482968 env[1103]: time="2023-10-02T19:27:05.482918374Z" level=info msg="shim disconnected" id=d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3 Oct 2 19:27:05.483132 env[1103]: time="2023-10-02T19:27:05.482970364Z" level=warning msg="cleaning up after shim disconnected" id=d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3 namespace=k8s.io Oct 2 19:27:05.483132 env[1103]: time="2023-10-02T19:27:05.482981985Z" level=info msg="cleaning up dead shim" Oct 2 19:27:05.489491 env[1103]: time="2023-10-02T19:27:05.489434096Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:27:05Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2657 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:27:05Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:27:05.489774 env[1103]: time="2023-10-02T19:27:05.489720532Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:27:05.491509 env[1103]: time="2023-10-02T19:27:05.491446302Z" level=error msg="Failed to pipe stdout of container \"d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3\"" error="reading from a closed fifo" Oct 2 19:27:05.491657 env[1103]: time="2023-10-02T19:27:05.491546584Z" level=error msg="Failed to pipe stderr of container \"d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3\"" error="reading from a closed fifo" Oct 2 19:27:05.494142 env[1103]: time="2023-10-02T19:27:05.494101163Z" level=error msg="StartContainer for \"d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:27:05.494366 kubelet[2029]: E1002 19:27:05.494310 2029 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3" Oct 2 19:27:05.494447 kubelet[2029]: E1002 19:27:05.494438 2029 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:27:05.494447 kubelet[2029]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:27:05.494447 kubelet[2029]: rm /hostbin/cilium-mount Oct 2 19:27:05.494447 kubelet[2029]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-5kv6x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:27:05.494572 kubelet[2029]: E1002 19:27:05.494484 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:27:05.581288 kubelet[2029]: I1002 19:27:05.581257 2029 scope.go:115] "RemoveContainer" containerID="982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c" Oct 2 19:27:05.581576 kubelet[2029]: I1002 19:27:05.581537 2029 scope.go:115] "RemoveContainer" containerID="982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c" Oct 2 19:27:05.582409 env[1103]: time="2023-10-02T19:27:05.582371992Z" level=info msg="RemoveContainer for \"982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c\"" Oct 2 19:27:05.582528 env[1103]: time="2023-10-02T19:27:05.582492542Z" level=info msg="RemoveContainer for \"982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c\"" Oct 2 19:27:05.582638 env[1103]: time="2023-10-02T19:27:05.582598093Z" level=error msg="RemoveContainer for \"982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c\" failed" error="failed to set removing state for container \"982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c\": container is already in removing state" Oct 2 19:27:05.582814 kubelet[2029]: E1002 19:27:05.582793 2029 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c\": container is already in removing state" containerID="982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c" Oct 2 19:27:05.582925 kubelet[2029]: E1002 19:27:05.582907 2029 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c": container is already in removing state; Skipping pod "cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)" Oct 2 19:27:05.583119 kubelet[2029]: E1002 19:27:05.583096 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:05.583535 kubelet[2029]: E1002 19:27:05.583499 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:27:05.585405 env[1103]: time="2023-10-02T19:27:05.585380428Z" level=info msg="RemoveContainer for \"982c03136005ba1d1e9a5c83b85f189c4a7e142b9440c7a50e5ba50f150c5e8c\" returns successfully" Oct 2 19:27:06.430673 kubelet[2029]: E1002 19:27:06.430632 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:06.439883 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3-rootfs.mount: Deactivated successfully. Oct 2 19:27:07.630112 systemd[1]: Started sshd@12-10.0.0.11:22-10.0.0.1:44272.service. Oct 2 19:27:07.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.11:22-10.0.0.1:44272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:07.630929 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:27:07.631001 kernel: audit: type=1130 audit(1696274827.628:1149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.11:22-10.0.0.1:44272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:07.662000 audit[2670]: USER_ACCT pid=2670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:07.664570 sshd[2670]: Accepted publickey for core from 10.0.0.1 port 44272 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:07.665931 sshd[2670]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:07.664000 audit[2670]: CRED_ACQ pid=2670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:07.671421 kernel: audit: type=1101 audit(1696274827.662:1150): pid=2670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:07.671478 kernel: audit: type=1103 audit(1696274827.664:1151): pid=2670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:07.671516 kernel: audit: type=1006 audit(1696274827.664:1152): pid=2670 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:27:07.671629 kernel: audit: type=1300 audit(1696274827.664:1152): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec92e1e30 a2=3 a3=0 items=0 ppid=1 pid=2670 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:07.664000 audit[2670]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec92e1e30 a2=3 a3=0 items=0 ppid=1 pid=2670 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:07.669437 systemd-logind[1094]: New session 13 of user core. Oct 2 19:27:07.670308 systemd[1]: Started session-13.scope. Oct 2 19:27:07.664000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:07.673699 kernel: audit: type=1327 audit(1696274827.664:1152): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:07.673000 audit[2670]: USER_START pid=2670 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:07.674000 audit[2672]: CRED_ACQ pid=2672 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:07.679516 kernel: audit: type=1105 audit(1696274827.673:1153): pid=2670 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:07.679580 kernel: audit: type=1103 audit(1696274827.674:1154): pid=2672 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:07.769942 sshd[2670]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:07.769000 audit[2670]: USER_END pid=2670 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:07.771972 systemd[1]: sshd@12-10.0.0.11:22-10.0.0.1:44272.service: Deactivated successfully. Oct 2 19:27:07.772686 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:27:07.773217 systemd-logind[1094]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:27:07.769000 audit[2670]: CRED_DISP pid=2670 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:07.773881 systemd-logind[1094]: Removed session 13. Oct 2 19:27:07.775799 kernel: audit: type=1106 audit(1696274827.769:1155): pid=2670 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:07.775852 kernel: audit: type=1104 audit(1696274827.769:1156): pid=2670 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:07.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.11:22-10.0.0.1:44272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:08.586800 kubelet[2029]: W1002 19:27:08.586770 2029 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb898b2a7_183d_4299_b143_f9d84d2b8c98.slice/cri-containerd-d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3.scope WatchSource:0}: task d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3 not found: not found Oct 2 19:27:11.431125 kubelet[2029]: E1002 19:27:11.431099 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:11.431537 kubelet[2029]: E1002 19:27:11.431303 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:12.664070 kubelet[2029]: I1002 19:27:12.664045 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:12.664070 kubelet[2029]: I1002 19:27:12.664074 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:27:12.665046 kubelet[2029]: I1002 19:27:12.665035 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:27:12.673841 kubelet[2029]: I1002 19:27:12.673825 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:12.673983 kubelet[2029]: I1002 19:27:12.673896 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:27:12.673983 kubelet[2029]: E1002 19:27:12.673916 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:27:12.673983 kubelet[2029]: E1002 19:27:12.673926 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:27:12.673983 kubelet[2029]: E1002 19:27:12.673934 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:27:12.673983 kubelet[2029]: E1002 19:27:12.673942 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:27:12.673983 kubelet[2029]: E1002 19:27:12.673950 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:27:12.673983 kubelet[2029]: E1002 19:27:12.673958 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:27:12.673983 kubelet[2029]: I1002 19:27:12.673966 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:27:17.774078 systemd[1]: Started sshd@13-10.0.0.11:22-10.0.0.1:52096.service. Oct 2 19:27:17.775521 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:27:17.775570 kernel: audit: type=1130 audit(1696274837.772:1158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.11:22-10.0.0.1:52096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:17.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.11:22-10.0.0.1:52096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:17.806000 audit[2685]: USER_ACCT pid=2685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:17.807659 sshd[2685]: Accepted publickey for core from 10.0.0.1 port 52096 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:17.809000 audit[2685]: CRED_ACQ pid=2685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:17.810843 sshd[2685]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:17.813029 kernel: audit: type=1101 audit(1696274837.806:1159): pid=2685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:17.813121 kernel: audit: type=1103 audit(1696274837.809:1160): pid=2685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:17.813159 kernel: audit: type=1006 audit(1696274837.809:1161): pid=2685 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:27:17.809000 audit[2685]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff992fa420 a2=3 a3=0 items=0 ppid=1 pid=2685 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:17.815496 systemd-logind[1094]: New session 14 of user core. Oct 2 19:27:17.816208 systemd[1]: Started session-14.scope. Oct 2 19:27:17.817847 kernel: audit: type=1300 audit(1696274837.809:1161): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff992fa420 a2=3 a3=0 items=0 ppid=1 pid=2685 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:17.817890 kernel: audit: type=1327 audit(1696274837.809:1161): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:17.809000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:17.818000 audit[2685]: USER_START pid=2685 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:17.819000 audit[2687]: CRED_ACQ pid=2687 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:17.825022 kernel: audit: type=1105 audit(1696274837.818:1162): pid=2685 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:17.825045 kernel: audit: type=1103 audit(1696274837.819:1163): pid=2687 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:17.912698 sshd[2685]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:17.912000 audit[2685]: USER_END pid=2685 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:17.914503 systemd[1]: sshd@13-10.0.0.11:22-10.0.0.1:52096.service: Deactivated successfully. Oct 2 19:27:17.915255 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:27:17.915741 systemd-logind[1094]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:27:17.916312 systemd-logind[1094]: Removed session 14. Oct 2 19:27:17.912000 audit[2685]: CRED_DISP pid=2685 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:17.918508 kernel: audit: type=1106 audit(1696274837.912:1164): pid=2685 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:17.918576 kernel: audit: type=1104 audit(1696274837.912:1165): pid=2685 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:17.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.11:22-10.0.0.1:52096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:18.430317 kubelet[2029]: E1002 19:27:18.430286 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:18.430733 kubelet[2029]: E1002 19:27:18.430577 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:27:22.684985 kubelet[2029]: I1002 19:27:22.684953 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:22.684985 kubelet[2029]: I1002 19:27:22.684984 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:27:22.685990 kubelet[2029]: I1002 19:27:22.685966 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:27:22.694049 kubelet[2029]: I1002 19:27:22.694023 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:22.694189 kubelet[2029]: I1002 19:27:22.694095 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:27:22.694189 kubelet[2029]: E1002 19:27:22.694113 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:27:22.694189 kubelet[2029]: E1002 19:27:22.694124 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:27:22.694189 kubelet[2029]: E1002 19:27:22.694133 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:27:22.694189 kubelet[2029]: E1002 19:27:22.694141 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:27:22.694189 kubelet[2029]: E1002 19:27:22.694151 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:27:22.694189 kubelet[2029]: E1002 19:27:22.694159 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:27:22.694189 kubelet[2029]: I1002 19:27:22.694167 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:27:27.916673 systemd[1]: Started sshd@14-10.0.0.11:22-10.0.0.1:55110.service. Oct 2 19:27:27.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.11:22-10.0.0.1:55110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:27.917499 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:27:27.917555 kernel: audit: type=1130 audit(1696274847.916:1167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.11:22-10.0.0.1:55110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:27.949000 audit[2701]: USER_ACCT pid=2701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:27.950301 sshd[2701]: Accepted publickey for core from 10.0.0.1 port 55110 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:27.951765 sshd[2701]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:27.951000 audit[2701]: CRED_ACQ pid=2701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:27.955035 kernel: audit: type=1101 audit(1696274847.949:1168): pid=2701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:27.955092 kernel: audit: type=1103 audit(1696274847.951:1169): pid=2701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:27.955112 kernel: audit: type=1006 audit(1696274847.951:1170): pid=2701 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:27:27.955318 systemd-logind[1094]: New session 15 of user core. Oct 2 19:27:27.956772 kernel: audit: type=1300 audit(1696274847.951:1170): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0c486690 a2=3 a3=0 items=0 ppid=1 pid=2701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:27.951000 audit[2701]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0c486690 a2=3 a3=0 items=0 ppid=1 pid=2701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:27.956126 systemd[1]: Started session-15.scope. Oct 2 19:27:27.959130 kernel: audit: type=1327 audit(1696274847.951:1170): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:27.951000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:27.960354 kernel: audit: type=1105 audit(1696274847.959:1171): pid=2701 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:27.959000 audit[2701]: USER_START pid=2701 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:27.961000 audit[2703]: CRED_ACQ pid=2703 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:27.965423 kernel: audit: type=1103 audit(1696274847.961:1172): pid=2703 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:28.055183 sshd[2701]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:28.055000 audit[2701]: USER_END pid=2701 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:28.057524 systemd[1]: sshd@14-10.0.0.11:22-10.0.0.1:55110.service: Deactivated successfully. Oct 2 19:27:28.058266 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:27:28.055000 audit[2701]: CRED_DISP pid=2701 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:28.058889 systemd-logind[1094]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:27:28.059586 systemd-logind[1094]: Removed session 15. Oct 2 19:27:28.061060 kernel: audit: type=1106 audit(1696274848.055:1173): pid=2701 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:28.061094 kernel: audit: type=1104 audit(1696274848.055:1174): pid=2701 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:28.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.11:22-10.0.0.1:55110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:32.704124 kubelet[2029]: I1002 19:27:32.704085 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:32.704124 kubelet[2029]: I1002 19:27:32.704114 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:27:32.706304 kubelet[2029]: I1002 19:27:32.706273 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:27:32.714883 kubelet[2029]: I1002 19:27:32.714858 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:32.715028 kubelet[2029]: I1002 19:27:32.714929 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:27:32.715028 kubelet[2029]: E1002 19:27:32.714948 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:27:32.715028 kubelet[2029]: E1002 19:27:32.714958 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:27:32.715028 kubelet[2029]: E1002 19:27:32.714966 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:27:32.715028 kubelet[2029]: E1002 19:27:32.714975 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:27:32.715028 kubelet[2029]: E1002 19:27:32.714983 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:27:32.715028 kubelet[2029]: E1002 19:27:32.714991 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:27:32.715028 kubelet[2029]: I1002 19:27:32.714998 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:27:33.430900 kubelet[2029]: E1002 19:27:33.430869 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:33.431120 kubelet[2029]: E1002 19:27:33.431106 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:27:35.804000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:35.807556 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:27:35.807675 kernel: audit: type=1400 audit(1696274855.804:1177): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:35.807694 kernel: audit: type=1400 audit(1696274855.804:1176): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:35.804000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:35.804000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0021f2270 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:27:35.812993 kernel: audit: type=1300 audit(1696274855.804:1177): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0021f2270 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:27:35.813025 kernel: audit: type=1300 audit(1696274855.804:1176): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00274eb20 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:27:35.804000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00274eb20 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:27:35.804000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:35.816352 kernel: audit: type=1327 audit(1696274855.804:1176): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:35.804000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:35.821211 kernel: audit: type=1327 audit(1696274855.804:1177): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:36.438000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:36.438000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:36.443862 kernel: audit: type=1400 audit(1696274856.438:1178): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:36.443912 kernel: audit: type=1400 audit(1696274856.438:1179): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:36.443937 kernel: audit: type=1300 audit(1696274856.438:1178): arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a5f85d0 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:27:36.438000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a5f85d0 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:27:36.446873 kernel: audit: type=1327 audit(1696274856.438:1178): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:27:36.438000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:27:36.438000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00a050870 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:27:36.438000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:27:36.438000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:36.438000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c001aa48a0 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:27:36.438000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:27:36.442000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:36.442000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a050900 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:27:36.442000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:27:36.450000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:36.450000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c003600140 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:27:36.450000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:27:36.450000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:36.450000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c002842a50 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:27:36.450000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:27:38.059613 systemd[1]: Started sshd@15-10.0.0.11:22-10.0.0.1:54200.service. Oct 2 19:27:38.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.11:22-10.0.0.1:54200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:38.094000 audit[2715]: USER_ACCT pid=2715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:38.095104 sshd[2715]: Accepted publickey for core from 10.0.0.1 port 54200 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:38.095000 audit[2715]: CRED_ACQ pid=2715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:38.095000 audit[2715]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7553e5f0 a2=3 a3=0 items=0 ppid=1 pid=2715 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:38.095000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:38.096274 sshd[2715]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:38.099606 systemd-logind[1094]: New session 16 of user core. Oct 2 19:27:38.100432 systemd[1]: Started session-16.scope. Oct 2 19:27:38.103000 audit[2715]: USER_START pid=2715 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:38.104000 audit[2717]: CRED_ACQ pid=2717 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:38.204842 sshd[2715]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:38.205000 audit[2715]: USER_END pid=2715 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:38.205000 audit[2715]: CRED_DISP pid=2715 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:38.207026 systemd[1]: sshd@15-10.0.0.11:22-10.0.0.1:54200.service: Deactivated successfully. Oct 2 19:27:38.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.11:22-10.0.0.1:54200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:38.207685 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:27:38.208305 systemd-logind[1094]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:27:38.208929 systemd-logind[1094]: Removed session 16. Oct 2 19:27:39.468041 kubelet[2029]: E1002 19:27:39.468008 2029 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:27:42.725392 kubelet[2029]: I1002 19:27:42.725370 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:42.725392 kubelet[2029]: I1002 19:27:42.725396 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:27:42.726302 kubelet[2029]: I1002 19:27:42.726290 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:27:42.733872 kubelet[2029]: I1002 19:27:42.733852 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:42.733934 kubelet[2029]: I1002 19:27:42.733916 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:27:42.733961 kubelet[2029]: E1002 19:27:42.733935 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:27:42.733961 kubelet[2029]: E1002 19:27:42.733946 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:27:42.733961 kubelet[2029]: E1002 19:27:42.733954 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:27:42.733961 kubelet[2029]: E1002 19:27:42.733962 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:27:42.734050 kubelet[2029]: E1002 19:27:42.733970 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:27:42.734050 kubelet[2029]: E1002 19:27:42.733979 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:27:42.734050 kubelet[2029]: I1002 19:27:42.733987 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:27:44.463957 kubelet[2029]: E1002 19:27:44.463923 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:27:46.430795 kubelet[2029]: E1002 19:27:46.430755 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:46.432415 env[1103]: time="2023-10-02T19:27:46.432384055Z" level=info msg="CreateContainer within sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:27:46.442296 env[1103]: time="2023-10-02T19:27:46.442263827Z" level=info msg="CreateContainer within sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8\"" Oct 2 19:27:46.442675 env[1103]: time="2023-10-02T19:27:46.442651219Z" level=info msg="StartContainer for \"897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8\"" Oct 2 19:27:46.456935 systemd[1]: run-containerd-runc-k8s.io-897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8-runc.bhZr0w.mount: Deactivated successfully. Oct 2 19:27:46.458152 systemd[1]: Started cri-containerd-897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8.scope. Oct 2 19:27:46.466143 systemd[1]: cri-containerd-897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8.scope: Deactivated successfully. Oct 2 19:27:46.466422 systemd[1]: Stopped cri-containerd-897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8.scope. Oct 2 19:27:46.475674 env[1103]: time="2023-10-02T19:27:46.475630895Z" level=info msg="shim disconnected" id=897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8 Oct 2 19:27:46.475787 env[1103]: time="2023-10-02T19:27:46.475674969Z" level=warning msg="cleaning up after shim disconnected" id=897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8 namespace=k8s.io Oct 2 19:27:46.475787 env[1103]: time="2023-10-02T19:27:46.475683434Z" level=info msg="cleaning up dead shim" Oct 2 19:27:46.481415 env[1103]: time="2023-10-02T19:27:46.481387970Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:27:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2754 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:27:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:27:46.481614 env[1103]: time="2023-10-02T19:27:46.481570394Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:27:46.481803 env[1103]: time="2023-10-02T19:27:46.481741178Z" level=error msg="Failed to pipe stdout of container \"897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8\"" error="reading from a closed fifo" Oct 2 19:27:46.482436 env[1103]: time="2023-10-02T19:27:46.482403078Z" level=error msg="Failed to pipe stderr of container \"897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8\"" error="reading from a closed fifo" Oct 2 19:27:46.484493 env[1103]: time="2023-10-02T19:27:46.484448101Z" level=error msg="StartContainer for \"897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:27:46.484645 kubelet[2029]: E1002 19:27:46.484630 2029 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8" Oct 2 19:27:46.484736 kubelet[2029]: E1002 19:27:46.484723 2029 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:27:46.484736 kubelet[2029]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:27:46.484736 kubelet[2029]: rm /hostbin/cilium-mount Oct 2 19:27:46.484736 kubelet[2029]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-5kv6x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:27:46.484862 kubelet[2029]: E1002 19:27:46.484763 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:27:46.643462 kubelet[2029]: I1002 19:27:46.643436 2029 scope.go:115] "RemoveContainer" containerID="d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3" Oct 2 19:27:46.643756 kubelet[2029]: I1002 19:27:46.643739 2029 scope.go:115] "RemoveContainer" containerID="d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3" Oct 2 19:27:46.644346 env[1103]: time="2023-10-02T19:27:46.644301865Z" level=info msg="RemoveContainer for \"d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3\"" Oct 2 19:27:46.644658 env[1103]: time="2023-10-02T19:27:46.644620297Z" level=info msg="RemoveContainer for \"d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3\"" Oct 2 19:27:46.644740 env[1103]: time="2023-10-02T19:27:46.644707492Z" level=error msg="RemoveContainer for \"d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3\" failed" error="failed to set removing state for container \"d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3\": container is already in removing state" Oct 2 19:27:46.644862 kubelet[2029]: E1002 19:27:46.644838 2029 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3\": container is already in removing state" containerID="d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3" Oct 2 19:27:46.644927 kubelet[2029]: E1002 19:27:46.644874 2029 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3": container is already in removing state; Skipping pod "cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)" Oct 2 19:27:46.644966 kubelet[2029]: E1002 19:27:46.644931 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:46.645173 kubelet[2029]: E1002 19:27:46.645148 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:27:46.647358 env[1103]: time="2023-10-02T19:27:46.647303315Z" level=info msg="RemoveContainer for \"d1f8b259f37413a22a7ff0be724bbb40f623dc55167b5e45e45dd43b082ba0b3\" returns successfully" Oct 2 19:27:47.439103 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8-rootfs.mount: Deactivated successfully. Oct 2 19:27:48.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.11:22-10.0.0.1:49134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:48.207984 systemd[1]: Started sshd@16-10.0.0.11:22-10.0.0.1:49134.service. Oct 2 19:27:48.208702 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:27:48.208750 kernel: audit: type=1130 audit(1696274868.206:1193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.11:22-10.0.0.1:49134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:48.244605 sshd[2768]: Accepted publickey for core from 10.0.0.1 port 49134 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:48.243000 audit[2768]: USER_ACCT pid=2768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.246000 audit[2768]: CRED_ACQ pid=2768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.247789 sshd[2768]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:48.249900 kernel: audit: type=1101 audit(1696274868.243:1194): pid=2768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.249950 kernel: audit: type=1103 audit(1696274868.246:1195): pid=2768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.249969 kernel: audit: type=1006 audit(1696274868.246:1196): pid=2768 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:27:48.250654 systemd-logind[1094]: New session 17 of user core. Oct 2 19:27:48.251498 kernel: audit: type=1300 audit(1696274868.246:1196): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff44d3abd0 a2=3 a3=0 items=0 ppid=1 pid=2768 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:48.246000 audit[2768]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff44d3abd0 a2=3 a3=0 items=0 ppid=1 pid=2768 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:48.251355 systemd[1]: Started session-17.scope. Oct 2 19:27:48.246000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:48.254702 kernel: audit: type=1327 audit(1696274868.246:1196): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:48.254000 audit[2768]: USER_START pid=2768 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.254000 audit[2770]: CRED_ACQ pid=2770 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.261177 kernel: audit: type=1105 audit(1696274868.254:1197): pid=2768 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.261224 kernel: audit: type=1103 audit(1696274868.254:1198): pid=2770 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.350686 sshd[2768]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:48.350000 audit[2768]: USER_END pid=2768 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.350000 audit[2768]: CRED_DISP pid=2768 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.354046 systemd[1]: Started sshd@17-10.0.0.11:22-10.0.0.1:49136.service. Oct 2 19:27:48.354448 systemd[1]: sshd@16-10.0.0.11:22-10.0.0.1:49134.service: Deactivated successfully. Oct 2 19:27:48.354977 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:27:48.355697 systemd-logind[1094]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:27:48.356652 systemd-logind[1094]: Removed session 17. Oct 2 19:27:48.356947 kernel: audit: type=1106 audit(1696274868.350:1199): pid=2768 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.356974 kernel: audit: type=1104 audit(1696274868.350:1200): pid=2768 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.11:22-10.0.0.1:49136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:48.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.11:22-10.0.0.1:49134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:48.386000 audit[2781]: USER_ACCT pid=2781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.388124 sshd[2781]: Accepted publickey for core from 10.0.0.1 port 49136 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:48.387000 audit[2781]: CRED_ACQ pid=2781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.387000 audit[2781]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee1419870 a2=3 a3=0 items=0 ppid=1 pid=2781 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:48.387000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:48.389137 sshd[2781]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:48.392487 systemd-logind[1094]: New session 18 of user core. Oct 2 19:27:48.393541 systemd[1]: Started session-18.scope. Oct 2 19:27:48.395000 audit[2781]: USER_START pid=2781 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:48.396000 audit[2784]: CRED_ACQ pid=2784 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:49.148124 sshd[2781]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:49.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.11:22-10.0.0.1:49152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:49.151045 systemd[1]: Started sshd@18-10.0.0.11:22-10.0.0.1:49152.service. Oct 2 19:27:49.152000 audit[2781]: USER_END pid=2781 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:49.152000 audit[2781]: CRED_DISP pid=2781 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:49.156649 systemd[1]: sshd@17-10.0.0.11:22-10.0.0.1:49136.service: Deactivated successfully. Oct 2 19:27:49.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.11:22-10.0.0.1:49136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:49.157258 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:27:49.158346 systemd-logind[1094]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:27:49.159076 systemd-logind[1094]: Removed session 18. Oct 2 19:27:49.193000 audit[2792]: USER_ACCT pid=2792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:49.195153 sshd[2792]: Accepted publickey for core from 10.0.0.1 port 49152 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:49.194000 audit[2792]: CRED_ACQ pid=2792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:49.194000 audit[2792]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb3705010 a2=3 a3=0 items=0 ppid=1 pid=2792 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:49.194000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:49.196178 sshd[2792]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:49.199484 systemd-logind[1094]: New session 19 of user core. Oct 2 19:27:49.200448 systemd[1]: Started session-19.scope. Oct 2 19:27:49.203000 audit[2792]: USER_START pid=2792 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:49.204000 audit[2795]: CRED_ACQ pid=2795 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:49.300063 sshd[2792]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:49.299000 audit[2792]: USER_END pid=2792 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:49.299000 audit[2792]: CRED_DISP pid=2792 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:49.302326 systemd[1]: sshd@18-10.0.0.11:22-10.0.0.1:49152.service: Deactivated successfully. Oct 2 19:27:49.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.11:22-10.0.0.1:49152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:49.303062 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:27:49.303625 systemd-logind[1094]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:27:49.304286 systemd-logind[1094]: Removed session 19. Oct 2 19:27:49.464646 kubelet[2029]: E1002 19:27:49.464532 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:27:49.580585 kubelet[2029]: W1002 19:27:49.580548 2029 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb898b2a7_183d_4299_b143_f9d84d2b8c98.slice/cri-containerd-897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8.scope WatchSource:0}: task 897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8 not found: not found Oct 2 19:27:52.745592 kubelet[2029]: I1002 19:27:52.745567 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:52.745592 kubelet[2029]: I1002 19:27:52.745592 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:27:52.746596 kubelet[2029]: I1002 19:27:52.746575 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:27:52.754350 kubelet[2029]: I1002 19:27:52.754307 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:52.754423 kubelet[2029]: I1002 19:27:52.754398 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:27:52.754477 kubelet[2029]: E1002 19:27:52.754424 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:27:52.754477 kubelet[2029]: E1002 19:27:52.754439 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:27:52.754477 kubelet[2029]: E1002 19:27:52.754451 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:27:52.754477 kubelet[2029]: E1002 19:27:52.754462 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:27:52.754477 kubelet[2029]: E1002 19:27:52.754473 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:27:52.754629 kubelet[2029]: E1002 19:27:52.754484 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:27:52.754629 kubelet[2029]: I1002 19:27:52.754497 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:27:52.819000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:52.819000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00100e480 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:27:52.819000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:52.819000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:52.819000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002787b40 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:27:52.819000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:52.820000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:52.820000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002787c60 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:27:52.820000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:52.820000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:52.820000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00100e4a0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:27:52.820000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:54.465851 kubelet[2029]: E1002 19:27:54.465823 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:27:57.430515 kubelet[2029]: E1002 19:27:57.430483 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:57.430841 kubelet[2029]: E1002 19:27:57.430719 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:27:59.304244 systemd[1]: Started sshd@19-10.0.0.11:22-10.0.0.1:40410.service. Oct 2 19:27:59.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.11:22-10.0.0.1:40410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:59.305480 kernel: kauditd_printk_skb: 35 callbacks suppressed Oct 2 19:27:59.305554 kernel: audit: type=1130 audit(1696274879.303:1224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.11:22-10.0.0.1:40410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:59.336000 audit[2808]: USER_ACCT pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:59.338203 sshd[2808]: Accepted publickey for core from 10.0.0.1 port 40410 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:59.339538 sshd[2808]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:59.337000 audit[2808]: CRED_ACQ pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:59.343024 systemd-logind[1094]: New session 20 of user core. Oct 2 19:27:59.343936 kernel: audit: type=1101 audit(1696274879.336:1225): pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:59.343973 kernel: audit: type=1103 audit(1696274879.337:1226): pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:59.343993 kernel: audit: type=1006 audit(1696274879.337:1227): pid=2808 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:27:59.344053 systemd[1]: Started session-20.scope. Oct 2 19:27:59.345849 kernel: audit: type=1300 audit(1696274879.337:1227): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4b6cc540 a2=3 a3=0 items=0 ppid=1 pid=2808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:59.337000 audit[2808]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4b6cc540 a2=3 a3=0 items=0 ppid=1 pid=2808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:59.337000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:59.349827 kernel: audit: type=1327 audit(1696274879.337:1227): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:59.349864 kernel: audit: type=1105 audit(1696274879.345:1228): pid=2808 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:59.345000 audit[2808]: USER_START pid=2808 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:59.346000 audit[2810]: CRED_ACQ pid=2810 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:59.354793 kernel: audit: type=1103 audit(1696274879.346:1229): pid=2810 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:59.441603 sshd[2808]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:59.441000 audit[2808]: USER_END pid=2808 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:59.443568 systemd[1]: sshd@19-10.0.0.11:22-10.0.0.1:40410.service: Deactivated successfully. Oct 2 19:27:59.444316 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:27:59.444855 systemd-logind[1094]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:27:59.441000 audit[2808]: CRED_DISP pid=2808 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:59.445581 systemd-logind[1094]: Removed session 20. Oct 2 19:27:59.447687 kernel: audit: type=1106 audit(1696274879.441:1230): pid=2808 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:59.447745 kernel: audit: type=1104 audit(1696274879.441:1231): pid=2808 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:59.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.11:22-10.0.0.1:40410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:59.466436 kubelet[2029]: E1002 19:27:59.466413 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:02.791046 kubelet[2029]: I1002 19:28:02.789677 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:02.791046 kubelet[2029]: I1002 19:28:02.789722 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:28:02.800435 kubelet[2029]: I1002 19:28:02.798080 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:28:02.825479 kubelet[2029]: I1002 19:28:02.825083 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:02.825479 kubelet[2029]: I1002 19:28:02.825203 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:28:02.825479 kubelet[2029]: E1002 19:28:02.825238 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:28:02.825479 kubelet[2029]: E1002 19:28:02.825257 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:28:02.825479 kubelet[2029]: E1002 19:28:02.825271 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:28:02.825479 kubelet[2029]: E1002 19:28:02.825284 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:28:02.825479 kubelet[2029]: E1002 19:28:02.825296 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:28:02.825479 kubelet[2029]: E1002 19:28:02.825308 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:28:02.825479 kubelet[2029]: I1002 19:28:02.825320 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:28:04.468738 kubelet[2029]: E1002 19:28:04.468234 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:09.462533 systemd[1]: Started sshd@20-10.0.0.11:22-10.0.0.1:42686.service. Oct 2 19:28:09.465694 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:09.465740 kernel: audit: type=1130 audit(1696274889.461:1233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.11:22-10.0.0.1:42686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:09.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.11:22-10.0.0.1:42686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:09.470110 kubelet[2029]: E1002 19:28:09.470079 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:09.527911 sshd[2821]: Accepted publickey for core from 10.0.0.1 port 42686 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:28:09.526000 audit[2821]: USER_ACCT pid=2821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:09.532593 kernel: audit: type=1101 audit(1696274889.526:1234): pid=2821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:09.531000 audit[2821]: CRED_ACQ pid=2821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:09.533406 sshd[2821]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:09.541425 kernel: audit: type=1103 audit(1696274889.531:1235): pid=2821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:09.541540 kernel: audit: type=1006 audit(1696274889.531:1236): pid=2821 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:28:09.540445 systemd-logind[1094]: New session 21 of user core. Oct 2 19:28:09.531000 audit[2821]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5ad3a320 a2=3 a3=0 items=0 ppid=1 pid=2821 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:09.542633 systemd[1]: Started session-21.scope. Oct 2 19:28:09.549917 kernel: audit: type=1300 audit(1696274889.531:1236): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5ad3a320 a2=3 a3=0 items=0 ppid=1 pid=2821 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:09.550069 kernel: audit: type=1327 audit(1696274889.531:1236): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:09.531000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:09.571000 audit[2821]: USER_START pid=2821 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:09.573000 audit[2823]: CRED_ACQ pid=2823 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:09.585129 kernel: audit: type=1105 audit(1696274889.571:1237): pid=2821 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:09.585270 kernel: audit: type=1103 audit(1696274889.573:1238): pid=2823 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:09.748407 sshd[2821]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:09.749000 audit[2821]: USER_END pid=2821 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:09.754494 systemd[1]: sshd@20-10.0.0.11:22-10.0.0.1:42686.service: Deactivated successfully. Oct 2 19:28:09.755506 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:28:09.757676 systemd-logind[1094]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:28:09.749000 audit[2821]: CRED_DISP pid=2821 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:09.765576 kernel: audit: type=1106 audit(1696274889.749:1239): pid=2821 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:09.765907 kernel: audit: type=1104 audit(1696274889.749:1240): pid=2821 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:09.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.11:22-10.0.0.1:42686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:09.764985 systemd-logind[1094]: Removed session 21. Oct 2 19:28:12.433882 kubelet[2029]: E1002 19:28:12.430951 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:12.433882 kubelet[2029]: E1002 19:28:12.433126 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:12.433882 kubelet[2029]: E1002 19:28:12.433383 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:12.433882 kubelet[2029]: E1002 19:28:12.433538 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:28:12.856143 kubelet[2029]: I1002 19:28:12.854694 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:12.856143 kubelet[2029]: I1002 19:28:12.854727 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:28:12.856461 kubelet[2029]: I1002 19:28:12.856293 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:28:12.880037 kubelet[2029]: I1002 19:28:12.879741 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:12.880037 kubelet[2029]: I1002 19:28:12.879869 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:28:12.880037 kubelet[2029]: E1002 19:28:12.879899 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:28:12.880037 kubelet[2029]: E1002 19:28:12.879918 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:28:12.880037 kubelet[2029]: E1002 19:28:12.879932 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:28:12.880037 kubelet[2029]: E1002 19:28:12.879945 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:28:12.880037 kubelet[2029]: E1002 19:28:12.879958 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:28:12.880037 kubelet[2029]: E1002 19:28:12.879971 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:28:12.880037 kubelet[2029]: I1002 19:28:12.879984 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:28:14.472707 kubelet[2029]: E1002 19:28:14.472054 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:19.473766 kubelet[2029]: E1002 19:28:19.473736 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:19.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.11:22-10.0.0.1:59696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:19.749225 systemd[1]: Started sshd@21-10.0.0.11:22-10.0.0.1:59696.service. Oct 2 19:28:19.753271 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:19.753408 kernel: audit: type=1130 audit(1696274899.748:1242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.11:22-10.0.0.1:59696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:19.789000 audit[2835]: USER_ACCT pid=2835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:19.790987 sshd[2835]: Accepted publickey for core from 10.0.0.1 port 59696 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:28:19.794897 kernel: audit: type=1101 audit(1696274899.789:1243): pid=2835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:19.794000 audit[2835]: CRED_ACQ pid=2835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:19.795800 sshd[2835]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:19.800619 kernel: audit: type=1103 audit(1696274899.794:1244): pid=2835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:19.800738 kernel: audit: type=1006 audit(1696274899.794:1245): pid=2835 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:28:19.800784 kernel: audit: type=1300 audit(1696274899.794:1245): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce6d0f470 a2=3 a3=0 items=0 ppid=1 pid=2835 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:19.794000 audit[2835]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce6d0f470 a2=3 a3=0 items=0 ppid=1 pid=2835 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:19.802652 systemd[1]: Started session-22.scope. Oct 2 19:28:19.804183 kernel: audit: type=1327 audit(1696274899.794:1245): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:19.794000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:19.803753 systemd-logind[1094]: New session 22 of user core. Oct 2 19:28:19.809000 audit[2835]: USER_START pid=2835 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:19.818166 kernel: audit: type=1105 audit(1696274899.809:1246): pid=2835 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:19.818275 kernel: audit: type=1103 audit(1696274899.809:1247): pid=2837 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:19.809000 audit[2837]: CRED_ACQ pid=2837 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:19.984180 sshd[2835]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:19.986000 audit[2835]: USER_END pid=2835 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:19.990113 systemd[1]: sshd@21-10.0.0.11:22-10.0.0.1:59696.service: Deactivated successfully. Oct 2 19:28:19.991232 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:28:19.993022 systemd-logind[1094]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:28:19.994435 systemd-logind[1094]: Removed session 22. Oct 2 19:28:19.986000 audit[2835]: CRED_DISP pid=2835 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:19.998264 kernel: audit: type=1106 audit(1696274899.986:1248): pid=2835 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:19.998453 kernel: audit: type=1104 audit(1696274899.986:1249): pid=2835 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:19.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.11:22-10.0.0.1:59696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:20.430605 kubelet[2029]: E1002 19:28:20.430567 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:21.431439 kubelet[2029]: E1002 19:28:21.431396 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:22.896798 kubelet[2029]: I1002 19:28:22.896743 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:22.896798 kubelet[2029]: I1002 19:28:22.896782 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:28:22.898515 kubelet[2029]: I1002 19:28:22.898462 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:28:22.911206 kubelet[2029]: I1002 19:28:22.911171 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:22.911424 kubelet[2029]: I1002 19:28:22.911273 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:28:22.911424 kubelet[2029]: E1002 19:28:22.911303 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:28:22.911424 kubelet[2029]: E1002 19:28:22.911320 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:28:22.911424 kubelet[2029]: E1002 19:28:22.911406 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:28:22.911424 kubelet[2029]: E1002 19:28:22.911424 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:28:22.911634 kubelet[2029]: E1002 19:28:22.911437 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:28:22.911634 kubelet[2029]: E1002 19:28:22.911451 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:28:22.911634 kubelet[2029]: I1002 19:28:22.911465 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:28:24.474714 kubelet[2029]: E1002 19:28:24.474673 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:25.430764 kubelet[2029]: E1002 19:28:25.430721 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:25.431004 kubelet[2029]: E1002 19:28:25.430968 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:28:29.475897 kubelet[2029]: E1002 19:28:29.475860 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:29.983863 systemd[1]: Started sshd@22-10.0.0.11:22-10.0.0.1:55204.service. Oct 2 19:28:29.984784 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:29.984825 kernel: audit: type=1130 audit(1696274909.982:1251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.11:22-10.0.0.1:55204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:29.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.11:22-10.0.0.1:55204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:30.014000 audit[2850]: USER_ACCT pid=2850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:30.016426 sshd[2850]: Accepted publickey for core from 10.0.0.1 port 55204 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:28:30.017683 sshd[2850]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:30.016000 audit[2850]: CRED_ACQ pid=2850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:30.020390 systemd-logind[1094]: New session 23 of user core. Oct 2 19:28:30.021046 systemd[1]: Started session-23.scope. Oct 2 19:28:30.021275 kernel: audit: type=1101 audit(1696274910.014:1252): pid=2850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:30.021315 kernel: audit: type=1103 audit(1696274910.016:1253): pid=2850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:30.021344 kernel: audit: type=1006 audit(1696274910.016:1254): pid=2850 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:28:30.016000 audit[2850]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfec68b50 a2=3 a3=0 items=0 ppid=1 pid=2850 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:30.025205 kernel: audit: type=1300 audit(1696274910.016:1254): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfec68b50 a2=3 a3=0 items=0 ppid=1 pid=2850 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:30.025247 kernel: audit: type=1327 audit(1696274910.016:1254): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:30.016000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:30.022000 audit[2850]: USER_START pid=2850 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:30.028767 kernel: audit: type=1105 audit(1696274910.022:1255): pid=2850 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:30.028798 kernel: audit: type=1103 audit(1696274910.023:1256): pid=2852 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:30.023000 audit[2852]: CRED_ACQ pid=2852 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:30.119195 sshd[2850]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:30.118000 audit[2850]: USER_END pid=2850 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:30.121469 systemd[1]: sshd@22-10.0.0.11:22-10.0.0.1:55204.service: Deactivated successfully. Oct 2 19:28:30.122116 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:28:30.122730 systemd-logind[1094]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:28:30.118000 audit[2850]: CRED_DISP pid=2850 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:30.123395 systemd-logind[1094]: Removed session 23. Oct 2 19:28:30.125011 kernel: audit: type=1106 audit(1696274910.118:1257): pid=2850 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:30.125058 kernel: audit: type=1104 audit(1696274910.118:1258): pid=2850 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:30.120000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.11:22-10.0.0.1:55204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:32.922394 kubelet[2029]: I1002 19:28:32.922361 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:32.922394 kubelet[2029]: I1002 19:28:32.922400 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:28:32.923350 kubelet[2029]: I1002 19:28:32.923316 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:28:32.931382 kubelet[2029]: I1002 19:28:32.931363 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:32.931479 kubelet[2029]: I1002 19:28:32.931462 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:28:32.931526 kubelet[2029]: E1002 19:28:32.931499 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:28:32.931526 kubelet[2029]: E1002 19:28:32.931515 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:28:32.931598 kubelet[2029]: E1002 19:28:32.931531 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:28:32.931598 kubelet[2029]: E1002 19:28:32.931543 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:28:32.931598 kubelet[2029]: E1002 19:28:32.931558 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:28:32.931598 kubelet[2029]: E1002 19:28:32.931571 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:28:32.931598 kubelet[2029]: I1002 19:28:32.931584 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:28:34.430801 kubelet[2029]: E1002 19:28:34.430756 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:34.477115 kubelet[2029]: E1002 19:28:34.477083 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:35.804000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:35.808567 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:35.808612 kernel: audit: type=1400 audit(1696274915.804:1260): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:35.808629 kernel: audit: type=1300 audit(1696274915.804:1260): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013b92f0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:28:35.804000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013b92f0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:28:35.804000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:35.814344 kernel: audit: type=1327 audit(1696274915.804:1260): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:35.814377 kernel: audit: type=1400 audit(1696274915.805:1261): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:35.805000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:35.805000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000de0180 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:28:35.819676 kernel: audit: type=1300 audit(1696274915.805:1261): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000de0180 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:28:35.819716 kernel: audit: type=1327 audit(1696274915.805:1261): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:35.805000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:36.438000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:36.438000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:36.444504 kernel: audit: type=1400 audit(1696274916.438:1262): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:36.444543 kernel: audit: type=1400 audit(1696274916.438:1263): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:36.444569 kernel: audit: type=1400 audit(1696274916.438:1264): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:36.438000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:36.438000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c01103adb0 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:28:36.449701 kernel: audit: type=1300 audit(1696274916.438:1262): arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c01103adb0 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:28:36.438000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00eea02c0 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:28:36.438000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c011286f90 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:28:36.438000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:28:36.438000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:28:36.438000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:28:36.441000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:36.441000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c011286ff0 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:28:36.441000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:28:36.450000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:36.450000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c0112870e0 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:28:36.450000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:28:36.450000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:36.450000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00edfd260 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:28:36.450000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:28:38.430765 kubelet[2029]: E1002 19:28:38.430737 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:38.431173 kubelet[2029]: E1002 19:28:38.430924 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:28:39.478355 kubelet[2029]: E1002 19:28:39.478320 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:40.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.11:22-10.0.0.1:47336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:40.123761 systemd[1]: Started sshd@23-10.0.0.11:22-10.0.0.1:47336.service. Oct 2 19:28:40.158000 audit[2865]: USER_ACCT pid=2865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:40.160111 sshd[2865]: Accepted publickey for core from 10.0.0.1 port 47336 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:28:40.159000 audit[2865]: CRED_ACQ pid=2865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:40.159000 audit[2865]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe02dd88b0 a2=3 a3=0 items=0 ppid=1 pid=2865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:40.159000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:40.161179 sshd[2865]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:40.164734 systemd-logind[1094]: New session 24 of user core. Oct 2 19:28:40.165604 systemd[1]: Started session-24.scope. Oct 2 19:28:40.168000 audit[2865]: USER_START pid=2865 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:40.169000 audit[2867]: CRED_ACQ pid=2867 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:40.265609 sshd[2865]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:40.265000 audit[2865]: USER_END pid=2865 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:40.265000 audit[2865]: CRED_DISP pid=2865 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:40.267904 systemd[1]: sshd@23-10.0.0.11:22-10.0.0.1:47336.service: Deactivated successfully. Oct 2 19:28:40.268611 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:28:40.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.11:22-10.0.0.1:47336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:40.269166 systemd-logind[1094]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:28:40.269858 systemd-logind[1094]: Removed session 24. Oct 2 19:28:42.944325 kubelet[2029]: I1002 19:28:42.944287 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:42.944325 kubelet[2029]: I1002 19:28:42.944324 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:28:42.945555 kubelet[2029]: I1002 19:28:42.945540 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:28:42.954950 kubelet[2029]: I1002 19:28:42.954914 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:42.955075 kubelet[2029]: I1002 19:28:42.954985 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:28:42.955075 kubelet[2029]: E1002 19:28:42.955006 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:28:42.955075 kubelet[2029]: E1002 19:28:42.955017 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:28:42.955075 kubelet[2029]: E1002 19:28:42.955026 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:28:42.955075 kubelet[2029]: E1002 19:28:42.955034 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:28:42.955075 kubelet[2029]: E1002 19:28:42.955044 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:28:42.955075 kubelet[2029]: E1002 19:28:42.955052 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:28:42.955075 kubelet[2029]: I1002 19:28:42.955061 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:28:44.480074 kubelet[2029]: E1002 19:28:44.480040 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:49.481659 kubelet[2029]: E1002 19:28:49.481634 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:50.270324 systemd[1]: Started sshd@24-10.0.0.11:22-10.0.0.1:47362.service. Oct 2 19:28:50.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.11:22-10.0.0.1:47362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:50.273273 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:28:50.273346 kernel: audit: type=1130 audit(1696274930.270:1277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.11:22-10.0.0.1:47362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:50.303000 audit[2878]: USER_ACCT pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:50.304220 sshd[2878]: Accepted publickey for core from 10.0.0.1 port 47362 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:28:50.305760 sshd[2878]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:50.305000 audit[2878]: CRED_ACQ pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:50.310359 kernel: audit: type=1101 audit(1696274930.303:1278): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:50.310491 kernel: audit: type=1103 audit(1696274930.305:1279): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:50.310508 kernel: audit: type=1006 audit(1696274930.305:1280): pid=2878 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:28:50.308905 systemd-logind[1094]: New session 25 of user core. Oct 2 19:28:50.309627 systemd[1]: Started session-25.scope. Oct 2 19:28:50.305000 audit[2878]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda0cf90d0 a2=3 a3=0 items=0 ppid=1 pid=2878 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:50.305000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:50.313000 audit[2878]: USER_START pid=2878 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:50.317040 kernel: audit: type=1300 audit(1696274930.305:1280): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda0cf90d0 a2=3 a3=0 items=0 ppid=1 pid=2878 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:50.317098 kernel: audit: type=1327 audit(1696274930.305:1280): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:50.317118 kernel: audit: type=1105 audit(1696274930.313:1281): pid=2878 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:50.317136 kernel: audit: type=1103 audit(1696274930.315:1282): pid=2880 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:50.315000 audit[2880]: CRED_ACQ pid=2880 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:50.413323 sshd[2878]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:50.413000 audit[2878]: USER_END pid=2878 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:50.415516 systemd[1]: sshd@24-10.0.0.11:22-10.0.0.1:47362.service: Deactivated successfully. Oct 2 19:28:50.416165 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:28:50.416704 systemd-logind[1094]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:28:50.413000 audit[2878]: CRED_DISP pid=2878 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:50.417395 systemd-logind[1094]: Removed session 25. Oct 2 19:28:50.419203 kernel: audit: type=1106 audit(1696274930.413:1283): pid=2878 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:50.419257 kernel: audit: type=1104 audit(1696274930.413:1284): pid=2878 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:50.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.11:22-10.0.0.1:47362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:51.431320 kubelet[2029]: E1002 19:28:51.431274 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:51.431795 kubelet[2029]: E1002 19:28:51.431480 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:28:52.820000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:52.820000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f31900 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:28:52.820000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:52.821000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:52.821000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d3d180 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:28:52.821000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:52.822000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:52.822000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000de0ae0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:28:52.822000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:52.822000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:52.822000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000d3d1c0 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:28:52.822000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:52.967232 kubelet[2029]: I1002 19:28:52.967200 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:52.967232 kubelet[2029]: I1002 19:28:52.967231 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:28:52.968073 kubelet[2029]: I1002 19:28:52.968060 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:28:52.974968 kubelet[2029]: I1002 19:28:52.974950 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:52.975040 kubelet[2029]: I1002 19:28:52.975020 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:28:52.975040 kubelet[2029]: E1002 19:28:52.975037 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:28:52.975093 kubelet[2029]: E1002 19:28:52.975047 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:28:52.975093 kubelet[2029]: E1002 19:28:52.975055 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:28:52.975093 kubelet[2029]: E1002 19:28:52.975063 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:28:52.975093 kubelet[2029]: E1002 19:28:52.975071 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:28:52.975093 kubelet[2029]: E1002 19:28:52.975079 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:28:52.975093 kubelet[2029]: I1002 19:28:52.975087 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:28:54.483461 kubelet[2029]: E1002 19:28:54.483431 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:59.483897 kubelet[2029]: E1002 19:28:59.483870 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:00.418268 systemd[1]: Started sshd@25-10.0.0.11:22-10.0.0.1:45968.service. Oct 2 19:29:00.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.11:22-10.0.0.1:45968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:00.419446 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:29:00.419541 kernel: audit: type=1130 audit(1696274940.417:1290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.11:22-10.0.0.1:45968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:00.457000 audit[2893]: USER_ACCT pid=2893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:00.458927 sshd[2893]: Accepted publickey for core from 10.0.0.1 port 45968 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:29:00.460000 audit[2893]: CRED_ACQ pid=2893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:00.461940 sshd[2893]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:00.463840 kernel: audit: type=1101 audit(1696274940.457:1291): pid=2893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:00.463911 kernel: audit: type=1103 audit(1696274940.460:1292): pid=2893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:00.463943 kernel: audit: type=1006 audit(1696274940.460:1293): pid=2893 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:29:00.465251 kernel: audit: type=1300 audit(1696274940.460:1293): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3cb948f0 a2=3 a3=0 items=0 ppid=1 pid=2893 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:00.460000 audit[2893]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3cb948f0 a2=3 a3=0 items=0 ppid=1 pid=2893 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:00.466232 systemd-logind[1094]: New session 26 of user core. Oct 2 19:29:00.467683 systemd[1]: Started session-26.scope. Oct 2 19:29:00.467799 kernel: audit: type=1327 audit(1696274940.460:1293): proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:00.460000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:00.471000 audit[2893]: USER_START pid=2893 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:00.475368 kernel: audit: type=1105 audit(1696274940.471:1294): pid=2893 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:00.474000 audit[2895]: CRED_ACQ pid=2895 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:00.478765 kernel: audit: type=1103 audit(1696274940.474:1295): pid=2895 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:00.578562 sshd[2893]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:00.578000 audit[2893]: USER_END pid=2893 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:00.581417 systemd[1]: sshd@25-10.0.0.11:22-10.0.0.1:45968.service: Deactivated successfully. Oct 2 19:29:00.582260 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:29:00.578000 audit[2893]: CRED_DISP pid=2893 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:00.583347 systemd-logind[1094]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:29:00.584219 systemd-logind[1094]: Removed session 26. Oct 2 19:29:00.584737 kernel: audit: type=1106 audit(1696274940.578:1296): pid=2893 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:00.584806 kernel: audit: type=1104 audit(1696274940.578:1297): pid=2893 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:00.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.11:22-10.0.0.1:45968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:02.989493 kubelet[2029]: I1002 19:29:02.989446 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:29:02.989493 kubelet[2029]: I1002 19:29:02.989489 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:29:02.991203 kubelet[2029]: I1002 19:29:02.991156 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:29:03.002001 kubelet[2029]: I1002 19:29:03.001967 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:29:03.002178 kubelet[2029]: I1002 19:29:03.002046 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:29:03.002178 kubelet[2029]: E1002 19:29:03.002070 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:29:03.002178 kubelet[2029]: E1002 19:29:03.002081 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:29:03.002178 kubelet[2029]: E1002 19:29:03.002090 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:29:03.002178 kubelet[2029]: E1002 19:29:03.002098 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:29:03.002178 kubelet[2029]: E1002 19:29:03.002107 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:29:03.002178 kubelet[2029]: E1002 19:29:03.002115 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:29:03.002178 kubelet[2029]: I1002 19:29:03.002124 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:29:04.485184 kubelet[2029]: E1002 19:29:04.485157 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:06.430261 kubelet[2029]: E1002 19:29:06.430220 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:06.430646 kubelet[2029]: E1002 19:29:06.430467 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:29:09.486620 kubelet[2029]: E1002 19:29:09.486582 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:10.582882 systemd[1]: Started sshd@26-10.0.0.11:22-10.0.0.1:33544.service. Oct 2 19:29:10.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.11:22-10.0.0.1:33544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:10.583569 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:29:10.583637 kernel: audit: type=1130 audit(1696274950.582:1299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.11:22-10.0.0.1:33544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:10.615000 audit[2906]: USER_ACCT pid=2906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:10.616542 sshd[2906]: Accepted publickey for core from 10.0.0.1 port 33544 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:29:10.618976 sshd[2906]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:10.618000 audit[2906]: CRED_ACQ pid=2906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:10.622074 kernel: audit: type=1101 audit(1696274950.615:1300): pid=2906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:10.622142 kernel: audit: type=1103 audit(1696274950.618:1301): pid=2906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:10.622160 kernel: audit: type=1006 audit(1696274950.618:1302): pid=2906 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:29:10.622535 systemd-logind[1094]: New session 27 of user core. Oct 2 19:29:10.623590 systemd[1]: Started session-27.scope. Oct 2 19:29:10.624054 kernel: audit: type=1300 audit(1696274950.618:1302): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd146561c0 a2=3 a3=0 items=0 ppid=1 pid=2906 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:10.618000 audit[2906]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd146561c0 a2=3 a3=0 items=0 ppid=1 pid=2906 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:10.618000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:10.628651 kernel: audit: type=1327 audit(1696274950.618:1302): proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:10.628691 kernel: audit: type=1105 audit(1696274950.627:1303): pid=2906 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:10.627000 audit[2906]: USER_START pid=2906 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:10.628000 audit[2908]: CRED_ACQ pid=2908 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:10.635198 kernel: audit: type=1103 audit(1696274950.628:1304): pid=2908 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:10.727549 sshd[2906]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:10.728000 audit[2906]: USER_END pid=2906 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:10.729801 systemd[1]: sshd@26-10.0.0.11:22-10.0.0.1:33544.service: Deactivated successfully. Oct 2 19:29:10.730542 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:29:10.731131 systemd-logind[1094]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:29:10.728000 audit[2906]: CRED_DISP pid=2906 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:10.731767 systemd-logind[1094]: Removed session 27. Oct 2 19:29:10.733373 kernel: audit: type=1106 audit(1696274950.728:1305): pid=2906 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:10.733420 kernel: audit: type=1104 audit(1696274950.728:1306): pid=2906 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:10.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.11:22-10.0.0.1:33544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:13.011943 kubelet[2029]: I1002 19:29:13.011910 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:29:13.011943 kubelet[2029]: I1002 19:29:13.011939 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:29:13.013301 kubelet[2029]: I1002 19:29:13.013284 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:29:13.020766 kubelet[2029]: I1002 19:29:13.020753 2029 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:29:13.020824 kubelet[2029]: I1002 19:29:13.020809 2029 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-zkdhc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-8ndwn kube-system/kube-proxy-wrxhv]" Oct 2 19:29:13.020862 kubelet[2029]: E1002 19:29:13.020827 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-zkdhc" Oct 2 19:29:13.020862 kubelet[2029]: E1002 19:29:13.020838 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:29:13.020862 kubelet[2029]: E1002 19:29:13.020846 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:29:13.020862 kubelet[2029]: E1002 19:29:13.020854 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:29:13.020862 kubelet[2029]: E1002 19:29:13.020862 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-8ndwn" Oct 2 19:29:13.020967 kubelet[2029]: E1002 19:29:13.020870 2029 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-wrxhv" Oct 2 19:29:13.020967 kubelet[2029]: I1002 19:29:13.020878 2029 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:29:14.487432 kubelet[2029]: E1002 19:29:14.487410 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:17.430434 kubelet[2029]: E1002 19:29:17.430400 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:19.430385 kubelet[2029]: E1002 19:29:19.430328 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:19.432002 env[1103]: time="2023-10-02T19:29:19.431951120Z" level=info msg="CreateContainer within sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:29:19.443305 env[1103]: time="2023-10-02T19:29:19.443262313Z" level=info msg="CreateContainer within sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7\"" Oct 2 19:29:19.443640 env[1103]: time="2023-10-02T19:29:19.443618353Z" level=info msg="StartContainer for \"b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7\"" Oct 2 19:29:19.458191 systemd[1]: Started cri-containerd-b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7.scope. Oct 2 19:29:19.465686 systemd[1]: cri-containerd-b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7.scope: Deactivated successfully. Oct 2 19:29:19.465900 systemd[1]: Stopped cri-containerd-b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7.scope. Oct 2 19:29:19.470039 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7-rootfs.mount: Deactivated successfully. Oct 2 19:29:19.477954 env[1103]: time="2023-10-02T19:29:19.477891902Z" level=info msg="shim disconnected" id=b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7 Oct 2 19:29:19.478138 env[1103]: time="2023-10-02T19:29:19.477955454Z" level=warning msg="cleaning up after shim disconnected" id=b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7 namespace=k8s.io Oct 2 19:29:19.478138 env[1103]: time="2023-10-02T19:29:19.477970803Z" level=info msg="cleaning up dead shim" Oct 2 19:29:19.483822 env[1103]: time="2023-10-02T19:29:19.483785379Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2942 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:29:19Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:29:19.483996 env[1103]: time="2023-10-02T19:29:19.483961235Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:29:19.484205 env[1103]: time="2023-10-02T19:29:19.484132293Z" level=error msg="Failed to pipe stdout of container \"b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7\"" error="reading from a closed fifo" Oct 2 19:29:19.484476 env[1103]: time="2023-10-02T19:29:19.484420123Z" level=error msg="Failed to pipe stderr of container \"b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7\"" error="reading from a closed fifo" Oct 2 19:29:19.486575 env[1103]: time="2023-10-02T19:29:19.486525151Z" level=error msg="StartContainer for \"b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:29:19.486791 kubelet[2029]: E1002 19:29:19.486760 2029 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7" Oct 2 19:29:19.486886 kubelet[2029]: E1002 19:29:19.486871 2029 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:29:19.486886 kubelet[2029]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:29:19.486886 kubelet[2029]: rm /hostbin/cilium-mount Oct 2 19:29:19.486886 kubelet[2029]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-5kv6x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:29:19.487011 kubelet[2029]: E1002 19:29:19.486910 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:29:19.488091 kubelet[2029]: E1002 19:29:19.488069 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:19.854132 kubelet[2029]: I1002 19:29:19.854106 2029 scope.go:115] "RemoveContainer" containerID="897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8" Oct 2 19:29:19.855366 kubelet[2029]: I1002 19:29:19.854479 2029 scope.go:115] "RemoveContainer" containerID="897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8" Oct 2 19:29:19.855537 env[1103]: time="2023-10-02T19:29:19.855039001Z" level=info msg="RemoveContainer for \"897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8\"" Oct 2 19:29:19.855908 env[1103]: time="2023-10-02T19:29:19.855852056Z" level=info msg="RemoveContainer for \"897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8\"" Oct 2 19:29:19.856115 env[1103]: time="2023-10-02T19:29:19.855958730Z" level=error msg="RemoveContainer for \"897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8\" failed" error="failed to set removing state for container \"897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8\": container is already in removing state" Oct 2 19:29:19.856365 kubelet[2029]: E1002 19:29:19.856241 2029 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8\": container is already in removing state" containerID="897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8" Oct 2 19:29:19.856365 kubelet[2029]: E1002 19:29:19.856270 2029 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8": container is already in removing state; Skipping pod "cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)" Oct 2 19:29:19.856365 kubelet[2029]: E1002 19:29:19.856328 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:19.856870 kubelet[2029]: E1002 19:29:19.856715 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-zkdhc_kube-system(b898b2a7-183d-4299-b143-f9d84d2b8c98)\"" pod="kube-system/cilium-zkdhc" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 Oct 2 19:29:19.858442 env[1103]: time="2023-10-02T19:29:19.858398148Z" level=info msg="RemoveContainer for \"897989b495aa0833325b50323de2910ed44fbeddb98737de0674e0ec67755ac8\" returns successfully" Oct 2 19:29:20.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.11:22-10.0.0.1:43940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:20.731688 systemd[1]: Started sshd@27-10.0.0.11:22-10.0.0.1:43940.service. Oct 2 19:29:20.732402 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:29:20.732442 kernel: audit: type=1130 audit(1696274960.730:1308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.11:22-10.0.0.1:43940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:20.764000 audit[2955]: USER_ACCT pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.766038 sshd[2955]: Accepted publickey for core from 10.0.0.1 port 43940 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:29:20.766000 audit[2955]: CRED_ACQ pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.768620 sshd[2955]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:20.770571 kernel: audit: type=1101 audit(1696274960.764:1309): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.770621 kernel: audit: type=1103 audit(1696274960.766:1310): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.770638 kernel: audit: type=1006 audit(1696274960.766:1311): pid=2955 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:29:20.771459 systemd-logind[1094]: New session 28 of user core. Oct 2 19:29:20.772115 kernel: audit: type=1300 audit(1696274960.766:1311): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddf80b890 a2=3 a3=0 items=0 ppid=1 pid=2955 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:20.766000 audit[2955]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddf80b890 a2=3 a3=0 items=0 ppid=1 pid=2955 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:20.772149 systemd[1]: Started session-28.scope. Oct 2 19:29:20.766000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:20.776144 kernel: audit: type=1327 audit(1696274960.766:1311): proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:20.775000 audit[2955]: USER_START pid=2955 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.776000 audit[2957]: CRED_ACQ pid=2957 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.781980 kernel: audit: type=1105 audit(1696274960.775:1312): pid=2955 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.782029 kernel: audit: type=1103 audit(1696274960.776:1313): pid=2957 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.872953 sshd[2955]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:20.872000 audit[2955]: USER_END pid=2955 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.875310 systemd[1]: sshd@27-10.0.0.11:22-10.0.0.1:43940.service: Deactivated successfully. Oct 2 19:29:20.875784 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:29:20.872000 audit[2955]: CRED_DISP pid=2955 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.876899 systemd[1]: Started sshd@28-10.0.0.11:22-10.0.0.1:43954.service. Oct 2 19:29:20.879189 kernel: audit: type=1106 audit(1696274960.872:1314): pid=2955 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.879237 kernel: audit: type=1104 audit(1696274960.872:1315): pid=2955 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.11:22-10.0.0.1:43940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:20.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.11:22-10.0.0.1:43954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:20.879042 systemd-logind[1094]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:29:20.879742 systemd-logind[1094]: Removed session 28. Oct 2 19:29:20.913000 audit[2969]: USER_ACCT pid=2969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.914939 sshd[2969]: Accepted publickey for core from 10.0.0.1 port 43954 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:29:20.914000 audit[2969]: CRED_ACQ pid=2969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.914000 audit[2969]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe06fe3b20 a2=3 a3=0 items=0 ppid=1 pid=2969 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:20.914000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:20.915802 sshd[2969]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:20.919174 systemd-logind[1094]: New session 29 of user core. Oct 2 19:29:20.920037 systemd[1]: Started session-29.scope. Oct 2 19:29:20.922000 audit[2969]: USER_START pid=2969 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:20.924000 audit[2972]: CRED_ACQ pid=2972 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:22.234281 env[1103]: time="2023-10-02T19:29:22.234227882Z" level=info msg="StopPodSandbox for \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\"" Oct 2 19:29:22.234664 env[1103]: time="2023-10-02T19:29:22.234298176Z" level=info msg="Container to stop \"b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:29:22.235804 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd-shm.mount: Deactivated successfully. Oct 2 19:29:22.239994 env[1103]: time="2023-10-02T19:29:22.239957177Z" level=info msg="StopContainer for \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\" with timeout 30 (s)" Oct 2 19:29:22.241715 systemd[1]: cri-containerd-862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd.scope: Deactivated successfully. Oct 2 19:29:22.241898 env[1103]: time="2023-10-02T19:29:22.241867110Z" level=info msg="Stop container \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\" with signal terminated" Oct 2 19:29:22.240000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:29:22.245000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:29:22.253641 systemd[1]: cri-containerd-e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892.scope: Deactivated successfully. Oct 2 19:29:22.252000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:29:22.259000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:29:22.272202 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd-rootfs.mount: Deactivated successfully. Oct 2 19:29:22.285076 env[1103]: time="2023-10-02T19:29:22.285023313Z" level=info msg="shim disconnected" id=862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd Oct 2 19:29:22.285076 env[1103]: time="2023-10-02T19:29:22.285070573Z" level=warning msg="cleaning up after shim disconnected" id=862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd namespace=k8s.io Oct 2 19:29:22.285076 env[1103]: time="2023-10-02T19:29:22.285079120Z" level=info msg="cleaning up dead shim" Oct 2 19:29:22.287130 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892-rootfs.mount: Deactivated successfully. Oct 2 19:29:22.298358 env[1103]: time="2023-10-02T19:29:22.294260877Z" level=info msg="shim disconnected" id=e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892 Oct 2 19:29:22.298358 env[1103]: time="2023-10-02T19:29:22.294313538Z" level=warning msg="cleaning up after shim disconnected" id=e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892 namespace=k8s.io Oct 2 19:29:22.298358 env[1103]: time="2023-10-02T19:29:22.294323086Z" level=info msg="cleaning up dead shim" Oct 2 19:29:22.302743 env[1103]: time="2023-10-02T19:29:22.302691338Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3017 runtime=io.containerd.runc.v2\n" Oct 2 19:29:22.303002 env[1103]: time="2023-10-02T19:29:22.302969589Z" level=info msg="TearDown network for sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" successfully" Oct 2 19:29:22.303002 env[1103]: time="2023-10-02T19:29:22.302994938Z" level=info msg="StopPodSandbox for \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" returns successfully" Oct 2 19:29:22.303072 env[1103]: time="2023-10-02T19:29:22.303051456Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3028 runtime=io.containerd.runc.v2\n" Oct 2 19:29:22.305850 env[1103]: time="2023-10-02T19:29:22.305818607Z" level=info msg="StopContainer for \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\" returns successfully" Oct 2 19:29:22.306202 env[1103]: time="2023-10-02T19:29:22.306169478Z" level=info msg="StopPodSandbox for \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\"" Oct 2 19:29:22.306352 env[1103]: time="2023-10-02T19:29:22.306226226Z" level=info msg="Container to stop \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:29:22.307448 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c-shm.mount: Deactivated successfully. Oct 2 19:29:22.312912 systemd[1]: cri-containerd-64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c.scope: Deactivated successfully. Oct 2 19:29:22.311000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:29:22.317000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:29:22.331788 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c-rootfs.mount: Deactivated successfully. Oct 2 19:29:22.335042 env[1103]: time="2023-10-02T19:29:22.335002984Z" level=info msg="shim disconnected" id=64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c Oct 2 19:29:22.335154 env[1103]: time="2023-10-02T19:29:22.335042780Z" level=warning msg="cleaning up after shim disconnected" id=64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c namespace=k8s.io Oct 2 19:29:22.335154 env[1103]: time="2023-10-02T19:29:22.335051657Z" level=info msg="cleaning up dead shim" Oct 2 19:29:22.342012 env[1103]: time="2023-10-02T19:29:22.341975537Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3062 runtime=io.containerd.runc.v2\n" Oct 2 19:29:22.342234 env[1103]: time="2023-10-02T19:29:22.342208312Z" level=info msg="TearDown network for sandbox \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\" successfully" Oct 2 19:29:22.342234 env[1103]: time="2023-10-02T19:29:22.342227578Z" level=info msg="StopPodSandbox for \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\" returns successfully" Oct 2 19:29:22.423894 kubelet[2029]: I1002 19:29:22.423854 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-cilium-run\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.423894 kubelet[2029]: I1002 19:29:22.423893 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/b898b2a7-183d-4299-b143-f9d84d2b8c98-clustermesh-secrets\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.423912 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-host-proc-sys-kernel\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.423930 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/b898b2a7-183d-4299-b143-f9d84d2b8c98-hubble-tls\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.423945 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-bpf-maps\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.423960 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-host-proc-sys-net\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.423974 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-cni-path\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.423972 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.423994 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/b898b2a7-183d-4299-b143-f9d84d2b8c98-cilium-config-path\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.424012 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-xtables-lock\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.424013 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.424029 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-cilium-cgroup\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.424048 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-5kv6x\" (UniqueName: \"kubernetes.io/projected/b898b2a7-183d-4299-b143-f9d84d2b8c98-kube-api-access-5kv6x\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.424062 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-etc-cni-netd\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.424075 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-hostproc\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.424090 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-lib-modules\") pod \"b898b2a7-183d-4299-b143-f9d84d2b8c98\" (UID: \"b898b2a7-183d-4299-b143-f9d84d2b8c98\") " Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.424116 2029 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.424126 2029 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.424141 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:22.424248 kubelet[2029]: I1002 19:29:22.424026 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:22.424694 kubelet[2029]: I1002 19:29:22.424146 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:22.424694 kubelet[2029]: I1002 19:29:22.424167 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:22.424694 kubelet[2029]: I1002 19:29:22.424179 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-cni-path" (OuterVolumeSpecName: "cni-path") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:22.424694 kubelet[2029]: I1002 19:29:22.424322 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-hostproc" (OuterVolumeSpecName: "hostproc") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:22.424694 kubelet[2029]: I1002 19:29:22.424350 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:22.424694 kubelet[2029]: I1002 19:29:22.424351 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:22.424694 kubelet[2029]: W1002 19:29:22.424325 2029 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/b898b2a7-183d-4299-b143-f9d84d2b8c98/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:29:22.426056 kubelet[2029]: I1002 19:29:22.426031 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/b898b2a7-183d-4299-b143-f9d84d2b8c98-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:29:22.426593 kubelet[2029]: I1002 19:29:22.426577 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/b898b2a7-183d-4299-b143-f9d84d2b8c98-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:29:22.426993 kubelet[2029]: I1002 19:29:22.426972 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b898b2a7-183d-4299-b143-f9d84d2b8c98-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:29:22.427480 kubelet[2029]: I1002 19:29:22.427452 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b898b2a7-183d-4299-b143-f9d84d2b8c98-kube-api-access-5kv6x" (OuterVolumeSpecName: "kube-api-access-5kv6x") pod "b898b2a7-183d-4299-b143-f9d84d2b8c98" (UID: "b898b2a7-183d-4299-b143-f9d84d2b8c98"). InnerVolumeSpecName "kube-api-access-5kv6x". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:29:22.524537 kubelet[2029]: I1002 19:29:22.524429 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/aa30c05d-8627-422d-a510-f2d1401b594f-cilium-config-path\") pod \"aa30c05d-8627-422d-a510-f2d1401b594f\" (UID: \"aa30c05d-8627-422d-a510-f2d1401b594f\") " Oct 2 19:29:22.524537 kubelet[2029]: I1002 19:29:22.524471 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-w84q6\" (UniqueName: \"kubernetes.io/projected/aa30c05d-8627-422d-a510-f2d1401b594f-kube-api-access-w84q6\") pod \"aa30c05d-8627-422d-a510-f2d1401b594f\" (UID: \"aa30c05d-8627-422d-a510-f2d1401b594f\") " Oct 2 19:29:22.524537 kubelet[2029]: I1002 19:29:22.524500 2029 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.524537 kubelet[2029]: I1002 19:29:22.524510 2029 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/b898b2a7-183d-4299-b143-f9d84d2b8c98-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.524537 kubelet[2029]: I1002 19:29:22.524520 2029 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.524537 kubelet[2029]: I1002 19:29:22.524529 2029 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/b898b2a7-183d-4299-b143-f9d84d2b8c98-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.524537 kubelet[2029]: I1002 19:29:22.524539 2029 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.524937 kubelet[2029]: I1002 19:29:22.524550 2029 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.524937 kubelet[2029]: I1002 19:29:22.524558 2029 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.524937 kubelet[2029]: I1002 19:29:22.524567 2029 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-5kv6x\" (UniqueName: \"kubernetes.io/projected/b898b2a7-183d-4299-b143-f9d84d2b8c98-kube-api-access-5kv6x\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.524937 kubelet[2029]: I1002 19:29:22.524575 2029 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.524937 kubelet[2029]: I1002 19:29:22.524583 2029 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.524937 kubelet[2029]: I1002 19:29:22.524591 2029 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/b898b2a7-183d-4299-b143-f9d84d2b8c98-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.524937 kubelet[2029]: I1002 19:29:22.524599 2029 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/b898b2a7-183d-4299-b143-f9d84d2b8c98-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.524937 kubelet[2029]: W1002 19:29:22.524625 2029 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/aa30c05d-8627-422d-a510-f2d1401b594f/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:29:22.526222 kubelet[2029]: I1002 19:29:22.526199 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/aa30c05d-8627-422d-a510-f2d1401b594f-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "aa30c05d-8627-422d-a510-f2d1401b594f" (UID: "aa30c05d-8627-422d-a510-f2d1401b594f"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:29:22.527296 kubelet[2029]: I1002 19:29:22.527275 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/aa30c05d-8627-422d-a510-f2d1401b594f-kube-api-access-w84q6" (OuterVolumeSpecName: "kube-api-access-w84q6") pod "aa30c05d-8627-422d-a510-f2d1401b594f" (UID: "aa30c05d-8627-422d-a510-f2d1401b594f"). InnerVolumeSpecName "kube-api-access-w84q6". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:29:22.583115 kubelet[2029]: W1002 19:29:22.583081 2029 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb898b2a7_183d_4299_b143_f9d84d2b8c98.slice/cri-containerd-b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7.scope WatchSource:0}: task b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7 not found: not found Oct 2 19:29:22.625266 kubelet[2029]: I1002 19:29:22.625234 2029 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-w84q6\" (UniqueName: \"kubernetes.io/projected/aa30c05d-8627-422d-a510-f2d1401b594f-kube-api-access-w84q6\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.625266 kubelet[2029]: I1002 19:29:22.625257 2029 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/aa30c05d-8627-422d-a510-f2d1401b594f-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:22.859753 kubelet[2029]: I1002 19:29:22.859650 2029 scope.go:115] "RemoveContainer" containerID="b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7" Oct 2 19:29:22.864098 systemd[1]: Removed slice kubepods-burstable-podb898b2a7_183d_4299_b143_f9d84d2b8c98.slice. Oct 2 19:29:22.864576 env[1103]: time="2023-10-02T19:29:22.864380753Z" level=info msg="RemoveContainer for \"b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7\"" Oct 2 19:29:22.868436 systemd[1]: Removed slice kubepods-besteffort-podaa30c05d_8627_422d_a510_f2d1401b594f.slice. Oct 2 19:29:22.959027 env[1103]: time="2023-10-02T19:29:22.958982821Z" level=info msg="RemoveContainer for \"b828ff37efda9a6ec92517cecb578bb2403d3d61edcf22da29035a7615d9b7b7\" returns successfully" Oct 2 19:29:22.959230 kubelet[2029]: I1002 19:29:22.959199 2029 scope.go:115] "RemoveContainer" containerID="e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892" Oct 2 19:29:22.960088 env[1103]: time="2023-10-02T19:29:22.960052567Z" level=info msg="RemoveContainer for \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\"" Oct 2 19:29:23.029623 kubelet[2029]: I1002 19:29:23.029600 2029 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:29:23.029623 kubelet[2029]: I1002 19:29:23.029626 2029 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:29:23.030101 kubelet[2029]: I1002 19:29:23.030073 2029 scope.go:115] "RemoveContainer" containerID="e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892" Oct 2 19:29:23.031042 env[1103]: time="2023-10-02T19:29:23.031017255Z" level=info msg="RemoveContainer for \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\"" Oct 2 19:29:23.031209 env[1103]: time="2023-10-02T19:29:23.031163504Z" level=error msg="RemoveContainer for \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\" failed" error="rpc error: code = NotFound desc = get container info: container \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\" in namespace \"k8s.io\": not found" Oct 2 19:29:23.031300 kubelet[2029]: E1002 19:29:23.031288 2029 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\" in namespace \"k8s.io\": not found" containerID="e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892" Oct 2 19:29:23.031359 kubelet[2029]: E1002 19:29:23.031319 2029 kuberuntime_gc.go:147] "Failed to remove container" err="rpc error: code = NotFound desc = get container info: container \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\" in namespace \"k8s.io\": not found" containerID="e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892" Oct 2 19:29:23.032708 env[1103]: time="2023-10-02T19:29:23.032687178Z" level=info msg="StopPodSandbox for \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\"" Oct 2 19:29:23.032833 env[1103]: time="2023-10-02T19:29:23.032789553Z" level=info msg="TearDown network for sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" successfully" Oct 2 19:29:23.032885 env[1103]: time="2023-10-02T19:29:23.032831764Z" level=info msg="StopPodSandbox for \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" returns successfully" Oct 2 19:29:23.033236 env[1103]: time="2023-10-02T19:29:23.033171233Z" level=info msg="RemovePodSandbox for \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\"" Oct 2 19:29:23.033236 env[1103]: time="2023-10-02T19:29:23.033198354Z" level=info msg="Forcibly stopping sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\"" Oct 2 19:29:23.033304 env[1103]: time="2023-10-02T19:29:23.033276223Z" level=info msg="TearDown network for sandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" successfully" Oct 2 19:29:23.046256 env[1103]: time="2023-10-02T19:29:23.046214219Z" level=info msg="RemoveContainer for \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\" returns successfully" Oct 2 19:29:23.046464 kubelet[2029]: I1002 19:29:23.046415 2029 scope.go:115] "RemoveContainer" containerID="e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892" Oct 2 19:29:23.046761 env[1103]: time="2023-10-02T19:29:23.046692873Z" level=error msg="ContainerStatus for \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\": not found" Oct 2 19:29:23.046932 kubelet[2029]: E1002 19:29:23.046911 2029 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\": not found" containerID="e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892" Oct 2 19:29:23.047060 kubelet[2029]: I1002 19:29:23.047042 2029 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892} err="failed to get container status \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\": rpc error: code = NotFound desc = an error occurred when try to find container \"e60567342d90c6a4c9002093d35e9683f34f3dd088b2d3c317ec947a9e5f0892\": not found" Oct 2 19:29:23.061094 env[1103]: time="2023-10-02T19:29:23.061057166Z" level=info msg="RemovePodSandbox \"862e15ba8cfaa71228020440a2e83a7fae7a5120b87d32b061836b24efd7a3cd\" returns successfully" Oct 2 19:29:23.061574 kubelet[2029]: I1002 19:29:23.061552 2029 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:29:23.062905 kubelet[2029]: I1002 19:29:23.062891 2029 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c" size=18897442 Oct 2 19:29:23.063052 env[1103]: time="2023-10-02T19:29:23.063027202Z" level=info msg="RemoveImage \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:29:23.070275 env[1103]: time="2023-10-02T19:29:23.070244741Z" level=info msg="ImageDelete event &ImageDelete{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,XXX_unrecognized:[],}" Oct 2 19:29:23.084553 env[1103]: time="2023-10-02T19:29:23.084525974Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,XXX_unrecognized:[],}" Oct 2 19:29:23.106159 env[1103]: time="2023-10-02T19:29:23.106099750Z" level=info msg="RemoveImage \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\" returns successfully" Oct 2 19:29:23.106373 kubelet[2029]: I1002 19:29:23.106331 2029 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b" size=166719855 Oct 2 19:29:23.106596 env[1103]: time="2023-10-02T19:29:23.106571611Z" level=info msg="RemoveImage \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:29:23.107718 env[1103]: time="2023-10-02T19:29:23.107693937Z" level=info msg="ImageDelete event &ImageDelete{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,XXX_unrecognized:[],}" Oct 2 19:29:23.108513 env[1103]: time="2023-10-02T19:29:23.108467706Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,XXX_unrecognized:[],}" Oct 2 19:29:23.218160 env[1103]: time="2023-10-02T19:29:23.218040229Z" level=info msg="RemoveImage \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\" returns successfully" Oct 2 19:29:23.224652 kubelet[2029]: I1002 19:29:23.224625 2029 eviction_manager.go:352] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:29:23.235491 systemd[1]: var-lib-kubelet-pods-aa30c05d\x2d8627\x2d422d\x2da510\x2df2d1401b594f-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dw84q6.mount: Deactivated successfully. Oct 2 19:29:23.235578 systemd[1]: var-lib-kubelet-pods-b898b2a7\x2d183d\x2d4299\x2db143\x2df9d84d2b8c98-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d5kv6x.mount: Deactivated successfully. Oct 2 19:29:23.235626 systemd[1]: var-lib-kubelet-pods-b898b2a7\x2d183d\x2d4299\x2db143\x2df9d84d2b8c98-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:29:23.235674 systemd[1]: var-lib-kubelet-pods-b898b2a7\x2d183d\x2d4299\x2db143\x2df9d84d2b8c98-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:29:23.432852 kubelet[2029]: I1002 19:29:23.432825 2029 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=aa30c05d-8627-422d-a510-f2d1401b594f path="/var/lib/kubelet/pods/aa30c05d-8627-422d-a510-f2d1401b594f/volumes" Oct 2 19:29:23.433198 kubelet[2029]: I1002 19:29:23.433139 2029 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=b898b2a7-183d-4299-b143-f9d84d2b8c98 path="/var/lib/kubelet/pods/b898b2a7-183d-4299-b143-f9d84d2b8c98/volumes" Oct 2 19:29:24.207549 sshd[2969]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:24.207000 audit[2969]: USER_END pid=2969 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:24.207000 audit[2969]: CRED_DISP pid=2969 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:24.210691 systemd[1]: sshd@28-10.0.0.11:22-10.0.0.1:43954.service: Deactivated successfully. Oct 2 19:29:24.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.11:22-10.0.0.1:43954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.211327 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:29:24.211915 systemd-logind[1094]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:29:24.213141 systemd[1]: Started sshd@29-10.0.0.11:22-10.0.0.1:54204.service. Oct 2 19:29:24.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.11:22-10.0.0.1:54204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.214030 systemd-logind[1094]: Removed session 29. Oct 2 19:29:24.249000 audit[3080]: USER_ACCT pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:24.250727 sshd[3080]: Accepted publickey for core from 10.0.0.1 port 54204 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:29:24.250000 audit[3080]: CRED_ACQ pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:24.250000 audit[3080]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec587e960 a2=3 a3=0 items=0 ppid=1 pid=3080 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:24.250000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:24.252267 sshd[3080]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:24.255712 systemd-logind[1094]: New session 30 of user core. Oct 2 19:29:24.256502 systemd[1]: Started session-30.scope. Oct 2 19:29:24.260000 audit[3080]: USER_START pid=3080 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:24.261000 audit[3082]: CRED_ACQ pid=3082 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:24.488838 kubelet[2029]: E1002 19:29:24.488803 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:24.848449 kubelet[2029]: I1002 19:29:24.848298 2029 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:29:24.848449 kubelet[2029]: E1002 19:29:24.848372 2029 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b898b2a7-183d-4299-b143-f9d84d2b8c98" containerName="mount-cgroup" Oct 2 19:29:24.848449 kubelet[2029]: E1002 19:29:24.848380 2029 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b898b2a7-183d-4299-b143-f9d84d2b8c98" containerName="mount-cgroup" Oct 2 19:29:24.848449 kubelet[2029]: E1002 19:29:24.848385 2029 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b898b2a7-183d-4299-b143-f9d84d2b8c98" containerName="mount-cgroup" Oct 2 19:29:24.848449 kubelet[2029]: E1002 19:29:24.848391 2029 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="aa30c05d-8627-422d-a510-f2d1401b594f" containerName="cilium-operator" Oct 2 19:29:24.848449 kubelet[2029]: I1002 19:29:24.848409 2029 memory_manager.go:346] "RemoveStaleState removing state" podUID="aa30c05d-8627-422d-a510-f2d1401b594f" containerName="cilium-operator" Oct 2 19:29:24.848449 kubelet[2029]: I1002 19:29:24.848415 2029 memory_manager.go:346] "RemoveStaleState removing state" podUID="b898b2a7-183d-4299-b143-f9d84d2b8c98" containerName="mount-cgroup" Oct 2 19:29:24.848449 kubelet[2029]: I1002 19:29:24.848419 2029 memory_manager.go:346] "RemoveStaleState removing state" podUID="b898b2a7-183d-4299-b143-f9d84d2b8c98" containerName="mount-cgroup" Oct 2 19:29:24.848449 kubelet[2029]: I1002 19:29:24.848425 2029 memory_manager.go:346] "RemoveStaleState removing state" podUID="b898b2a7-183d-4299-b143-f9d84d2b8c98" containerName="mount-cgroup" Oct 2 19:29:24.848449 kubelet[2029]: I1002 19:29:24.848430 2029 memory_manager.go:346] "RemoveStaleState removing state" podUID="b898b2a7-183d-4299-b143-f9d84d2b8c98" containerName="mount-cgroup" Oct 2 19:29:24.848449 kubelet[2029]: I1002 19:29:24.848434 2029 memory_manager.go:346] "RemoveStaleState removing state" podUID="b898b2a7-183d-4299-b143-f9d84d2b8c98" containerName="mount-cgroup" Oct 2 19:29:24.848449 kubelet[2029]: E1002 19:29:24.848448 2029 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b898b2a7-183d-4299-b143-f9d84d2b8c98" containerName="mount-cgroup" Oct 2 19:29:24.848449 kubelet[2029]: E1002 19:29:24.848453 2029 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b898b2a7-183d-4299-b143-f9d84d2b8c98" containerName="mount-cgroup" Oct 2 19:29:24.848997 kubelet[2029]: I1002 19:29:24.848466 2029 memory_manager.go:346] "RemoveStaleState removing state" podUID="b898b2a7-183d-4299-b143-f9d84d2b8c98" containerName="mount-cgroup" Oct 2 19:29:24.848997 kubelet[2029]: E1002 19:29:24.848479 2029 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b898b2a7-183d-4299-b143-f9d84d2b8c98" containerName="mount-cgroup" Oct 2 19:29:24.851584 kubelet[2029]: W1002 19:29:24.851164 2029 reflector.go:424] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:29:24.851584 kubelet[2029]: E1002 19:29:24.851195 2029 reflector.go:140] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:29:24.853047 kubelet[2029]: W1002 19:29:24.852002 2029 reflector.go:424] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:29:24.853047 kubelet[2029]: E1002 19:29:24.852021 2029 reflector.go:140] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:29:24.856260 systemd[1]: Created slice kubepods-burstable-podb9aee0ea_4d72_4de1_87ab_4106ee37a8fe.slice. Oct 2 19:29:24.937033 kubelet[2029]: I1002 19:29:24.936993 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-xtables-lock\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937033 kubelet[2029]: I1002 19:29:24.937026 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cni-path\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937033 kubelet[2029]: I1002 19:29:24.937045 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-host-proc-sys-net\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937303 kubelet[2029]: I1002 19:29:24.937064 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-hostproc\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937303 kubelet[2029]: I1002 19:29:24.937081 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-config-path\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937303 kubelet[2029]: I1002 19:29:24.937125 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-hubble-tls\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937303 kubelet[2029]: I1002 19:29:24.937164 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dhwz6\" (UniqueName: \"kubernetes.io/projected/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-kube-api-access-dhwz6\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937303 kubelet[2029]: I1002 19:29:24.937215 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-etc-cni-netd\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937303 kubelet[2029]: I1002 19:29:24.937243 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-lib-modules\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937303 kubelet[2029]: I1002 19:29:24.937261 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-host-proc-sys-kernel\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937303 kubelet[2029]: I1002 19:29:24.937288 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-cgroup\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937303 kubelet[2029]: I1002 19:29:24.937307 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-clustermesh-secrets\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937609 kubelet[2029]: I1002 19:29:24.937322 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-run\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937609 kubelet[2029]: I1002 19:29:24.937379 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-ipsec-secrets\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:24.937609 kubelet[2029]: I1002 19:29:24.937417 2029 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-bpf-maps\") pod \"cilium-zv626\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " pod="kube-system/cilium-zv626" Oct 2 19:29:25.430944 kubelet[2029]: E1002 19:29:25.430913 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:26.039923 kubelet[2029]: E1002 19:29:26.039882 2029 secret.go:194] Couldn't get secret kube-system/cilium-ipsec-keys: failed to sync secret cache: timed out waiting for the condition Oct 2 19:29:26.040241 kubelet[2029]: E1002 19:29:26.039979 2029 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-ipsec-secrets podName:b9aee0ea-4d72-4de1-87ab-4106ee37a8fe nodeName:}" failed. No retries permitted until 2023-10-02 19:29:26.539954944 +0000 UTC m=+227.223385338 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-ipsec-secrets" (UniqueName: "kubernetes.io/secret/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-ipsec-secrets") pod "cilium-zv626" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:29:26.040241 kubelet[2029]: E1002 19:29:26.039885 2029 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:29:26.040241 kubelet[2029]: E1002 19:29:26.039998 2029 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-zv626: failed to sync secret cache: timed out waiting for the condition Oct 2 19:29:26.040241 kubelet[2029]: E1002 19:29:26.040046 2029 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-hubble-tls podName:b9aee0ea-4d72-4de1-87ab-4106ee37a8fe nodeName:}" failed. No retries permitted until 2023-10-02 19:29:26.540032762 +0000 UTC m=+227.223463156 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-hubble-tls") pod "cilium-zv626" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:29:26.659443 kubelet[2029]: E1002 19:29:26.659406 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:26.659959 env[1103]: time="2023-10-02T19:29:26.659922523Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-zv626,Uid:b9aee0ea-4d72-4de1-87ab-4106ee37a8fe,Namespace:kube-system,Attempt:0,}" Oct 2 19:29:27.100763 env[1103]: time="2023-10-02T19:29:27.100687972Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:27.103246 env[1103]: time="2023-10-02T19:29:27.103127602Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:27.105995 env[1103]: time="2023-10-02T19:29:27.105924806Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:27.108447 env[1103]: time="2023-10-02T19:29:27.108405094Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:27.127859 env[1103]: time="2023-10-02T19:29:27.127743076Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:29:27.127859 env[1103]: time="2023-10-02T19:29:27.127811928Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:29:27.127859 env[1103]: time="2023-10-02T19:29:27.127828600Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:29:27.129110 env[1103]: time="2023-10-02T19:29:27.128085921Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db pid=3103 runtime=io.containerd.runc.v2 Oct 2 19:29:27.143998 systemd[1]: Started cri-containerd-5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db.scope. Oct 2 19:29:27.157391 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 19:29:27.157539 kernel: audit: type=1400 audit(1696274967.152:1338): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.157582 kernel: audit: type=1400 audit(1696274967.152:1339): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.163381 kernel: audit: type=1400 audit(1696274967.152:1340): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.163546 kernel: audit: type=1400 audit(1696274967.152:1341): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.167166 kernel: audit: type=1400 audit(1696274967.152:1342): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.172785 kernel: audit: type=1400 audit(1696274967.152:1343): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.172886 kernel: audit: type=1400 audit(1696274967.152:1344): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.175554 kernel: audit: type=1400 audit(1696274967.152:1345): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.175658 kernel: audit: type=1400 audit(1696274967.152:1346): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.178489 kernel: audit: type=1400 audit(1696274967.155:1347): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.155000 audit: BPF prog-id=128 op=LOAD Oct 2 19:29:27.158000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.158000 audit[3114]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3103 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:27.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561363836626262343365613534616635326238386336373939303735 Oct 2 19:29:27.158000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.158000 audit[3114]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3103 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:27.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561363836626262343365613534616635326238386336373939303735 Oct 2 19:29:27.158000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.158000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.158000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.158000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.158000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.158000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.158000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.158000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.158000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.158000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.158000 audit: BPF prog-id=129 op=LOAD Oct 2 19:29:27.158000 audit[3114]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003ca9d0 items=0 ppid=3103 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:27.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561363836626262343365613534616635326238386336373939303735 Oct 2 19:29:27.160000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.160000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.160000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.160000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.160000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.160000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.160000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.160000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.160000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.160000 audit: BPF prog-id=130 op=LOAD Oct 2 19:29:27.160000 audit[3114]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003caa18 items=0 ppid=3103 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:27.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561363836626262343365613534616635326238386336373939303735 Oct 2 19:29:27.163000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:29:27.163000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:29:27.163000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.163000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.163000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.163000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.163000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.163000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.163000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.163000 audit[3114]: AVC avc: denied { perfmon } for pid=3114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.163000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.163000 audit[3114]: AVC avc: denied { bpf } for pid=3114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:27.163000 audit: BPF prog-id=131 op=LOAD Oct 2 19:29:27.163000 audit[3114]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003cae28 items=0 ppid=3103 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:27.163000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561363836626262343365613534616635326238386336373939303735 Oct 2 19:29:27.192824 env[1103]: time="2023-10-02T19:29:27.192762396Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-zv626,Uid:b9aee0ea-4d72-4de1-87ab-4106ee37a8fe,Namespace:kube-system,Attempt:0,} returns sandbox id \"5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db\"" Oct 2 19:29:27.193382 kubelet[2029]: E1002 19:29:27.193366 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:27.194507 env[1103]: time="2023-10-02T19:29:27.194476351Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:29:28.430445 kubelet[2029]: E1002 19:29:28.430403 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:29.489895 kubelet[2029]: E1002 19:29:29.489859 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:32.507565 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4099928301.mount: Deactivated successfully. Oct 2 19:29:34.490986 kubelet[2029]: E1002 19:29:34.490944 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:35.805000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:35.809380 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 2 19:29:35.809449 kernel: audit: type=1400 audit(1696274975.805:1356): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:35.809491 kernel: audit: type=1300 audit(1696274975.805:1356): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002764b10 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:29:35.805000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002764b10 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:29:35.812491 kernel: audit: type=1327 audit(1696274975.805:1356): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:35.805000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:35.815105 kernel: audit: type=1400 audit(1696274975.805:1357): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:35.805000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:35.817366 kernel: audit: type=1300 audit(1696274975.805:1357): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cd6460 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:29:35.805000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cd6460 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:29:35.820363 kernel: audit: type=1327 audit(1696274975.805:1357): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:35.805000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:35.870248 env[1103]: time="2023-10-02T19:29:35.870188024Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:35.871950 env[1103]: time="2023-10-02T19:29:35.871898777Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:35.873443 env[1103]: time="2023-10-02T19:29:35.873388428Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:35.874450 env[1103]: time="2023-10-02T19:29:35.874411591Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:29:35.876539 env[1103]: time="2023-10-02T19:29:35.876501948Z" level=info msg="CreateContainer within sandbox \"5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:29:35.890751 env[1103]: time="2023-10-02T19:29:35.890703761Z" level=info msg="CreateContainer within sandbox \"5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb\"" Oct 2 19:29:35.891388 env[1103]: time="2023-10-02T19:29:35.891316931Z" level=info msg="StartContainer for \"537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb\"" Oct 2 19:29:35.905550 systemd[1]: Started cri-containerd-537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb.scope. Oct 2 19:29:35.914901 systemd[1]: cri-containerd-537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb.scope: Deactivated successfully. Oct 2 19:29:35.915290 systemd[1]: Stopped cri-containerd-537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb.scope. Oct 2 19:29:35.918389 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb-rootfs.mount: Deactivated successfully. Oct 2 19:29:36.231611 env[1103]: time="2023-10-02T19:29:36.231545414Z" level=info msg="shim disconnected" id=537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb Oct 2 19:29:36.231611 env[1103]: time="2023-10-02T19:29:36.231614345Z" level=warning msg="cleaning up after shim disconnected" id=537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb namespace=k8s.io Oct 2 19:29:36.231895 env[1103]: time="2023-10-02T19:29:36.231626338Z" level=info msg="cleaning up dead shim" Oct 2 19:29:36.239247 env[1103]: time="2023-10-02T19:29:36.239172020Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3160 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:29:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:29:36.239568 env[1103]: time="2023-10-02T19:29:36.239494756Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:29:36.239775 env[1103]: time="2023-10-02T19:29:36.239722450Z" level=error msg="Failed to pipe stdout of container \"537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb\"" error="reading from a closed fifo" Oct 2 19:29:36.239895 env[1103]: time="2023-10-02T19:29:36.239753199Z" level=error msg="Failed to pipe stderr of container \"537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb\"" error="reading from a closed fifo" Oct 2 19:29:36.246026 env[1103]: time="2023-10-02T19:29:36.245937785Z" level=error msg="StartContainer for \"537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:29:36.246281 kubelet[2029]: E1002 19:29:36.246241 2029 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb" Oct 2 19:29:36.246644 kubelet[2029]: E1002 19:29:36.246406 2029 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:29:36.246644 kubelet[2029]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:29:36.246644 kubelet[2029]: rm /hostbin/cilium-mount Oct 2 19:29:36.246644 kubelet[2029]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dhwz6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-zv626_kube-system(b9aee0ea-4d72-4de1-87ab-4106ee37a8fe): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:29:36.246644 kubelet[2029]: E1002 19:29:36.246460 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zv626" podUID=b9aee0ea-4d72-4de1-87ab-4106ee37a8fe Oct 2 19:29:36.431479 kubelet[2029]: E1002 19:29:36.431440 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:36.439000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:36.439000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00b059230 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:29:36.445913 kernel: audit: type=1400 audit(1696274976.439:1358): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:36.446008 kernel: audit: type=1300 audit(1696274976.439:1358): arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00b059230 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:29:36.446037 kernel: audit: type=1327 audit(1696274976.439:1358): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:29:36.439000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:29:36.448755 kernel: audit: type=1400 audit(1696274976.439:1359): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:36.439000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:36.439000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c001e1cd00 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:29:36.439000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:29:36.439000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:36.439000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00b43bf80 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:29:36.439000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:29:36.443000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:36.443000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00b2cc930 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:29:36.443000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:29:36.451000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:36.451000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c002b10960 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:29:36.451000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:29:36.451000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:36.451000 audit[1883]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00b0592c0 a2=fc6 a3=0 items=0 ppid=1730 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c784,c884 key=(null) Oct 2 19:29:36.451000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:29:36.896315 kubelet[2029]: E1002 19:29:36.896288 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:36.898847 env[1103]: time="2023-10-02T19:29:36.898798487Z" level=info msg="CreateContainer within sandbox \"5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:29:36.909779 env[1103]: time="2023-10-02T19:29:36.909729415Z" level=info msg="CreateContainer within sandbox \"5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91\"" Oct 2 19:29:36.910498 env[1103]: time="2023-10-02T19:29:36.910460460Z" level=info msg="StartContainer for \"94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91\"" Oct 2 19:29:36.923590 systemd[1]: Started cri-containerd-94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91.scope. Oct 2 19:29:36.929811 systemd[1]: cri-containerd-94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91.scope: Deactivated successfully. Oct 2 19:29:36.930056 systemd[1]: Stopped cri-containerd-94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91.scope. Oct 2 19:29:36.933238 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91-rootfs.mount: Deactivated successfully. Oct 2 19:29:36.939136 env[1103]: time="2023-10-02T19:29:36.939078404Z" level=info msg="shim disconnected" id=94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91 Oct 2 19:29:36.939136 env[1103]: time="2023-10-02T19:29:36.939130294Z" level=warning msg="cleaning up after shim disconnected" id=94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91 namespace=k8s.io Oct 2 19:29:36.939136 env[1103]: time="2023-10-02T19:29:36.939139681Z" level=info msg="cleaning up dead shim" Oct 2 19:29:36.945016 env[1103]: time="2023-10-02T19:29:36.944978599Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3195 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:29:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:29:36.945209 env[1103]: time="2023-10-02T19:29:36.945162099Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:29:36.945371 env[1103]: time="2023-10-02T19:29:36.945314900Z" level=error msg="Failed to pipe stdout of container \"94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91\"" error="reading from a closed fifo" Oct 2 19:29:36.945423 env[1103]: time="2023-10-02T19:29:36.945403298Z" level=error msg="Failed to pipe stderr of container \"94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91\"" error="reading from a closed fifo" Oct 2 19:29:36.947563 env[1103]: time="2023-10-02T19:29:36.947526388Z" level=error msg="StartContainer for \"94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:29:36.947753 kubelet[2029]: E1002 19:29:36.947725 2029 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91" Oct 2 19:29:36.947873 kubelet[2029]: E1002 19:29:36.947847 2029 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:29:36.947873 kubelet[2029]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:29:36.947873 kubelet[2029]: rm /hostbin/cilium-mount Oct 2 19:29:36.947873 kubelet[2029]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dhwz6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-zv626_kube-system(b9aee0ea-4d72-4de1-87ab-4106ee37a8fe): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:29:36.948012 kubelet[2029]: E1002 19:29:36.947890 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zv626" podUID=b9aee0ea-4d72-4de1-87ab-4106ee37a8fe Oct 2 19:29:37.899217 kubelet[2029]: I1002 19:29:37.899182 2029 scope.go:115] "RemoveContainer" containerID="537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb" Oct 2 19:29:37.899630 kubelet[2029]: I1002 19:29:37.899455 2029 scope.go:115] "RemoveContainer" containerID="537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb" Oct 2 19:29:37.900196 env[1103]: time="2023-10-02T19:29:37.900163419Z" level=info msg="RemoveContainer for \"537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb\"" Oct 2 19:29:37.900526 env[1103]: time="2023-10-02T19:29:37.900483268Z" level=info msg="RemoveContainer for \"537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb\"" Oct 2 19:29:37.900679 env[1103]: time="2023-10-02T19:29:37.900592356Z" level=error msg="RemoveContainer for \"537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb\" failed" error="failed to set removing state for container \"537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb\": container is already in removing state" Oct 2 19:29:37.900752 kubelet[2029]: E1002 19:29:37.900736 2029 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb\": container is already in removing state" containerID="537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb" Oct 2 19:29:37.900796 kubelet[2029]: E1002 19:29:37.900768 2029 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb": container is already in removing state; Skipping pod "cilium-zv626_kube-system(b9aee0ea-4d72-4de1-87ab-4106ee37a8fe)" Oct 2 19:29:37.900894 kubelet[2029]: E1002 19:29:37.900877 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:37.901158 kubelet[2029]: E1002 19:29:37.901140 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-zv626_kube-system(b9aee0ea-4d72-4de1-87ab-4106ee37a8fe)\"" pod="kube-system/cilium-zv626" podUID=b9aee0ea-4d72-4de1-87ab-4106ee37a8fe Oct 2 19:29:37.905200 env[1103]: time="2023-10-02T19:29:37.905165217Z" level=info msg="RemoveContainer for \"537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb\" returns successfully" Oct 2 19:29:38.902391 kubelet[2029]: E1002 19:29:38.902367 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:38.902714 kubelet[2029]: E1002 19:29:38.902573 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-zv626_kube-system(b9aee0ea-4d72-4de1-87ab-4106ee37a8fe)\"" pod="kube-system/cilium-zv626" podUID=b9aee0ea-4d72-4de1-87ab-4106ee37a8fe Oct 2 19:29:39.336882 kubelet[2029]: W1002 19:29:39.336837 2029 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb9aee0ea_4d72_4de1_87ab_4106ee37a8fe.slice/cri-containerd-537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb.scope WatchSource:0}: container "537fa4a96d17eb76981c9f25035f62e69e25f1aa9ed7c6baa9a73573950761bb" in namespace "k8s.io": not found Oct 2 19:29:39.399327 env[1103]: time="2023-10-02T19:29:39.399285658Z" level=info msg="StopPodSandbox for \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\"" Oct 2 19:29:39.399676 env[1103]: time="2023-10-02T19:29:39.399376220Z" level=info msg="TearDown network for sandbox \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\" successfully" Oct 2 19:29:39.399676 env[1103]: time="2023-10-02T19:29:39.399406769Z" level=info msg="StopPodSandbox for \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\" returns successfully" Oct 2 19:29:39.399727 env[1103]: time="2023-10-02T19:29:39.399687032Z" level=info msg="RemovePodSandbox for \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\"" Oct 2 19:29:39.399751 env[1103]: time="2023-10-02T19:29:39.399718883Z" level=info msg="Forcibly stopping sandbox \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\"" Oct 2 19:29:39.399827 env[1103]: time="2023-10-02T19:29:39.399796411Z" level=info msg="TearDown network for sandbox \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\" successfully" Oct 2 19:29:39.402481 env[1103]: time="2023-10-02T19:29:39.402455932Z" level=info msg="RemovePodSandbox \"64846ac2506544fab26c15294db8cd2f34d8027bab5da35cd59fb39cb031061c\" returns successfully" Oct 2 19:29:39.492544 kubelet[2029]: E1002 19:29:39.492511 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:42.443617 kubelet[2029]: W1002 19:29:42.443574 2029 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb9aee0ea_4d72_4de1_87ab_4106ee37a8fe.slice/cri-containerd-94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91.scope WatchSource:0}: task 94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91 not found: not found Oct 2 19:29:44.494095 kubelet[2029]: E1002 19:29:44.494060 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:49.494949 kubelet[2029]: E1002 19:29:49.494899 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:51.430488 kubelet[2029]: E1002 19:29:51.430437 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:51.432274 env[1103]: time="2023-10-02T19:29:51.432242722Z" level=info msg="CreateContainer within sandbox \"5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:29:51.441872 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3148159900.mount: Deactivated successfully. Oct 2 19:29:51.443486 env[1103]: time="2023-10-02T19:29:51.443445524Z" level=info msg="CreateContainer within sandbox \"5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b\"" Oct 2 19:29:51.443973 env[1103]: time="2023-10-02T19:29:51.443948371Z" level=info msg="StartContainer for \"91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b\"" Oct 2 19:29:51.458017 systemd[1]: Started cri-containerd-91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b.scope. Oct 2 19:29:51.465186 systemd[1]: cri-containerd-91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b.scope: Deactivated successfully. Oct 2 19:29:51.465493 systemd[1]: Stopped cri-containerd-91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b.scope. Oct 2 19:29:51.468265 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b-rootfs.mount: Deactivated successfully. Oct 2 19:29:51.475043 env[1103]: time="2023-10-02T19:29:51.474974430Z" level=info msg="shim disconnected" id=91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b Oct 2 19:29:51.475195 env[1103]: time="2023-10-02T19:29:51.475045506Z" level=warning msg="cleaning up after shim disconnected" id=91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b namespace=k8s.io Oct 2 19:29:51.475195 env[1103]: time="2023-10-02T19:29:51.475060504Z" level=info msg="cleaning up dead shim" Oct 2 19:29:51.481683 env[1103]: time="2023-10-02T19:29:51.481633734Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3233 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:29:51Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:29:51.481956 env[1103]: time="2023-10-02T19:29:51.481904380Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:29:51.482109 env[1103]: time="2023-10-02T19:29:51.482070375Z" level=error msg="Failed to pipe stdout of container \"91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b\"" error="reading from a closed fifo" Oct 2 19:29:51.482202 env[1103]: time="2023-10-02T19:29:51.482085184Z" level=error msg="Failed to pipe stderr of container \"91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b\"" error="reading from a closed fifo" Oct 2 19:29:51.484378 env[1103]: time="2023-10-02T19:29:51.484326700Z" level=error msg="StartContainer for \"91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:29:51.484564 kubelet[2029]: E1002 19:29:51.484544 2029 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b" Oct 2 19:29:51.485117 kubelet[2029]: E1002 19:29:51.485090 2029 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:29:51.485117 kubelet[2029]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:29:51.485117 kubelet[2029]: rm /hostbin/cilium-mount Oct 2 19:29:51.485117 kubelet[2029]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dhwz6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-zv626_kube-system(b9aee0ea-4d72-4de1-87ab-4106ee37a8fe): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:29:51.485377 kubelet[2029]: E1002 19:29:51.485146 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zv626" podUID=b9aee0ea-4d72-4de1-87ab-4106ee37a8fe Oct 2 19:29:51.922000 kubelet[2029]: I1002 19:29:51.921975 2029 scope.go:115] "RemoveContainer" containerID="94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91" Oct 2 19:29:51.922260 kubelet[2029]: I1002 19:29:51.922241 2029 scope.go:115] "RemoveContainer" containerID="94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91" Oct 2 19:29:51.922910 env[1103]: time="2023-10-02T19:29:51.922845824Z" level=info msg="RemoveContainer for \"94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91\"" Oct 2 19:29:51.926770 env[1103]: time="2023-10-02T19:29:51.926726890Z" level=info msg="RemoveContainer for \"94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91\" returns successfully" Oct 2 19:29:51.927154 env[1103]: time="2023-10-02T19:29:51.927130618Z" level=info msg="RemoveContainer for \"94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91\"" Oct 2 19:29:51.927154 env[1103]: time="2023-10-02T19:29:51.927152109Z" level=info msg="RemoveContainer for \"94ebe808446c7f3d2a8a0ddb71f79fc89a2f858edd0147bbbedf996caa842e91\" returns successfully" Oct 2 19:29:51.927474 kubelet[2029]: E1002 19:29:51.927460 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:51.927663 kubelet[2029]: E1002 19:29:51.927653 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-zv626_kube-system(b9aee0ea-4d72-4de1-87ab-4106ee37a8fe)\"" pod="kube-system/cilium-zv626" podUID=b9aee0ea-4d72-4de1-87ab-4106ee37a8fe Oct 2 19:29:52.820000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:52.825305 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:29:52.825399 kernel: audit: type=1400 audit(1696274992.820:1364): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:52.825432 kernel: audit: type=1300 audit(1696274992.820:1364): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0019f1420 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:29:52.820000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0019f1420 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:29:52.820000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:52.832840 kernel: audit: type=1327 audit(1696274992.820:1364): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:52.832869 kernel: audit: type=1400 audit(1696274992.820:1365): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:52.820000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:52.820000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0019f1440 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:29:52.839993 kernel: audit: type=1300 audit(1696274992.820:1365): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0019f1440 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:29:52.840021 kernel: audit: type=1327 audit(1696274992.820:1365): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:52.820000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:52.822000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:52.846409 kernel: audit: type=1400 audit(1696274992.822:1366): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:52.846439 kernel: audit: type=1300 audit(1696274992.822:1366): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001c8ca80 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:29:52.822000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001c8ca80 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:29:52.822000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:52.852090 kernel: audit: type=1327 audit(1696274992.822:1366): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:52.852136 kernel: audit: type=1400 audit(1696274992.822:1367): avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:52.822000 audit[1916]: AVC avc: denied { watch } for pid=1916 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7042 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:52.822000 audit[1916]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000cd7540 a2=fc6 a3=0 items=0 ppid=1758 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c490 key=(null) Oct 2 19:29:52.822000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:54.496408 kubelet[2029]: E1002 19:29:54.496372 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:54.580426 kubelet[2029]: W1002 19:29:54.580392 2029 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb9aee0ea_4d72_4de1_87ab_4106ee37a8fe.slice/cri-containerd-91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b.scope WatchSource:0}: task 91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b not found: not found Oct 2 19:29:59.497467 kubelet[2029]: E1002 19:29:59.497412 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:03.430852 kubelet[2029]: E1002 19:30:03.430824 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:03.432589 kubelet[2029]: E1002 19:30:03.431013 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-zv626_kube-system(b9aee0ea-4d72-4de1-87ab-4106ee37a8fe)\"" pod="kube-system/cilium-zv626" podUID=b9aee0ea-4d72-4de1-87ab-4106ee37a8fe Oct 2 19:30:04.498467 kubelet[2029]: E1002 19:30:04.498436 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:09.499936 kubelet[2029]: E1002 19:30:09.499902 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:14.501325 kubelet[2029]: E1002 19:30:14.501292 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:18.430347 kubelet[2029]: E1002 19:30:18.430303 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:18.432263 env[1103]: time="2023-10-02T19:30:18.432232404Z" level=info msg="CreateContainer within sandbox \"5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:30:18.442563 env[1103]: time="2023-10-02T19:30:18.442529927Z" level=info msg="CreateContainer within sandbox \"5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0\"" Oct 2 19:30:18.442862 env[1103]: time="2023-10-02T19:30:18.442844364Z" level=info msg="StartContainer for \"9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0\"" Oct 2 19:30:18.457277 systemd[1]: Started cri-containerd-9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0.scope. Oct 2 19:30:18.462649 systemd[1]: cri-containerd-9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0.scope: Deactivated successfully. Oct 2 19:30:18.462911 systemd[1]: Stopped cri-containerd-9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0.scope. Oct 2 19:30:18.485462 env[1103]: time="2023-10-02T19:30:18.485418754Z" level=info msg="shim disconnected" id=9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0 Oct 2 19:30:18.485655 env[1103]: time="2023-10-02T19:30:18.485463248Z" level=warning msg="cleaning up after shim disconnected" id=9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0 namespace=k8s.io Oct 2 19:30:18.485655 env[1103]: time="2023-10-02T19:30:18.485472477Z" level=info msg="cleaning up dead shim" Oct 2 19:30:18.491426 env[1103]: time="2023-10-02T19:30:18.491392311Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:18Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3271 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:30:18Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:30:18.491677 env[1103]: time="2023-10-02T19:30:18.491620604Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 19:30:18.491852 env[1103]: time="2023-10-02T19:30:18.491782101Z" level=error msg="Failed to pipe stdout of container \"9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0\"" error="reading from a closed fifo" Oct 2 19:30:18.491852 env[1103]: time="2023-10-02T19:30:18.491797791Z" level=error msg="Failed to pipe stderr of container \"9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0\"" error="reading from a closed fifo" Oct 2 19:30:18.494108 env[1103]: time="2023-10-02T19:30:18.494060124Z" level=error msg="StartContainer for \"9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:30:18.494274 kubelet[2029]: E1002 19:30:18.494247 2029 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0" Oct 2 19:30:18.494454 kubelet[2029]: E1002 19:30:18.494364 2029 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:30:18.494454 kubelet[2029]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:30:18.494454 kubelet[2029]: rm /hostbin/cilium-mount Oct 2 19:30:18.494454 kubelet[2029]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dhwz6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-zv626_kube-system(b9aee0ea-4d72-4de1-87ab-4106ee37a8fe): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:30:18.494601 kubelet[2029]: E1002 19:30:18.494591 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zv626" podUID=b9aee0ea-4d72-4de1-87ab-4106ee37a8fe Oct 2 19:30:18.967152 kubelet[2029]: I1002 19:30:18.967126 2029 scope.go:115] "RemoveContainer" containerID="91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b" Oct 2 19:30:18.967418 kubelet[2029]: I1002 19:30:18.967405 2029 scope.go:115] "RemoveContainer" containerID="91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b" Oct 2 19:30:18.968561 env[1103]: time="2023-10-02T19:30:18.968518631Z" level=info msg="RemoveContainer for \"91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b\"" Oct 2 19:30:18.968728 env[1103]: time="2023-10-02T19:30:18.968677253Z" level=info msg="RemoveContainer for \"91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b\"" Oct 2 19:30:18.968757 env[1103]: time="2023-10-02T19:30:18.968731716Z" level=error msg="RemoveContainer for \"91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b\" failed" error="failed to set removing state for container \"91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b\": container is already in removing state" Oct 2 19:30:18.968869 kubelet[2029]: E1002 19:30:18.968846 2029 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b\": container is already in removing state" containerID="91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b" Oct 2 19:30:18.968981 kubelet[2029]: E1002 19:30:18.968874 2029 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b": container is already in removing state; Skipping pod "cilium-zv626_kube-system(b9aee0ea-4d72-4de1-87ab-4106ee37a8fe)" Oct 2 19:30:18.968981 kubelet[2029]: E1002 19:30:18.968924 2029 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:18.969118 kubelet[2029]: E1002 19:30:18.969108 2029 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-zv626_kube-system(b9aee0ea-4d72-4de1-87ab-4106ee37a8fe)\"" pod="kube-system/cilium-zv626" podUID=b9aee0ea-4d72-4de1-87ab-4106ee37a8fe Oct 2 19:30:18.971578 env[1103]: time="2023-10-02T19:30:18.971559142Z" level=info msg="RemoveContainer for \"91625a895907bf8177fefd3fb452781c09e140dbfffb031dba1877ef95f1ac0b\" returns successfully" Oct 2 19:30:19.439013 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0-rootfs.mount: Deactivated successfully. Oct 2 19:30:19.502146 kubelet[2029]: E1002 19:30:19.502130 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:21.589276 kubelet[2029]: W1002 19:30:21.589224 2029 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb9aee0ea_4d72_4de1_87ab_4106ee37a8fe.slice/cri-containerd-9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0.scope WatchSource:0}: task 9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0 not found: not found Oct 2 19:30:24.503004 kubelet[2029]: E1002 19:30:24.502969 2029 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:25.985310 env[1103]: time="2023-10-02T19:30:25.985255789Z" level=info msg="StopPodSandbox for \"5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db\"" Oct 2 19:30:25.985856 env[1103]: time="2023-10-02T19:30:25.985827463Z" level=info msg="Container to stop \"9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:30:25.987599 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db-shm.mount: Deactivated successfully. Oct 2 19:30:25.998361 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:30:25.998493 kernel: audit: type=1334 audit(1696275025.993:1368): prog-id=128 op=UNLOAD Oct 2 19:30:25.993000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:30:25.993947 systemd[1]: cri-containerd-5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db.scope: Deactivated successfully. Oct 2 19:30:25.999000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:30:26.001387 kernel: audit: type=1334 audit(1696275025.999:1369): prog-id=131 op=UNLOAD Oct 2 19:30:26.016842 sshd[3080]: pam_unix(sshd:session): session closed for user core Oct 2 19:30:26.017000 audit[3080]: USER_END pid=3080 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:26.019193 systemd[1]: sshd@29-10.0.0.11:22-10.0.0.1:54204.service: Deactivated successfully. Oct 2 19:30:26.020048 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:30:26.025521 kernel: audit: type=1106 audit(1696275026.017:1370): pid=3080 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:26.025592 kernel: audit: type=1104 audit(1696275026.017:1371): pid=3080 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:26.025613 kernel: audit: type=1131 audit(1696275026.018:1372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.11:22-10.0.0.1:54204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.017000 audit[3080]: CRED_DISP pid=3080 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:26.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.11:22-10.0.0.1:54204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.021955 systemd-logind[1094]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:30:26.022684 systemd-logind[1094]: Removed session 30. Oct 2 19:30:26.027226 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db-rootfs.mount: Deactivated successfully. Oct 2 19:30:26.041879 env[1103]: time="2023-10-02T19:30:26.041823962Z" level=info msg="shim disconnected" id=5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db Oct 2 19:30:26.041879 env[1103]: time="2023-10-02T19:30:26.041863907Z" level=warning msg="cleaning up after shim disconnected" id=5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db namespace=k8s.io Oct 2 19:30:26.041879 env[1103]: time="2023-10-02T19:30:26.041872273Z" level=info msg="cleaning up dead shim" Oct 2 19:30:26.047532 env[1103]: time="2023-10-02T19:30:26.047475110Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3307 runtime=io.containerd.runc.v2\n" Oct 2 19:30:26.047755 env[1103]: time="2023-10-02T19:30:26.047735023Z" level=info msg="TearDown network for sandbox \"5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db\" successfully" Oct 2 19:30:26.047803 env[1103]: time="2023-10-02T19:30:26.047754701Z" level=info msg="StopPodSandbox for \"5a686bbb43ea54af52b88c67990757627a00f3a7e8b56c474a9d91d7efcc00db\" returns successfully" Oct 2 19:30:26.161610 kubelet[2029]: I1002 19:30:26.161569 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-hubble-tls\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161625 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-host-proc-sys-net\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161654 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-etc-cni-netd\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161684 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-xtables-lock\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161694 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161713 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-lib-modules\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161746 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-clustermesh-secrets\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161745 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161780 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161790 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-config-path\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161817 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-run\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161845 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-ipsec-secrets\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161868 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cni-path\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161892 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-host-proc-sys-kernel\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161915 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-cgroup\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161941 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-hostproc\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.161976 kubelet[2029]: I1002 19:30:26.161969 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-dhwz6\" (UniqueName: \"kubernetes.io/projected/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-kube-api-access-dhwz6\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.162362 kubelet[2029]: I1002 19:30:26.161994 2029 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-bpf-maps\") pod \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\" (UID: \"b9aee0ea-4d72-4de1-87ab-4106ee37a8fe\") " Oct 2 19:30:26.162362 kubelet[2029]: I1002 19:30:26.162031 2029 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.162362 kubelet[2029]: I1002 19:30:26.162046 2029 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.162362 kubelet[2029]: I1002 19:30:26.162060 2029 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.162362 kubelet[2029]: I1002 19:30:26.162082 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:26.162362 kubelet[2029]: I1002 19:30:26.162104 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cni-path" (OuterVolumeSpecName: "cni-path") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:26.162362 kubelet[2029]: I1002 19:30:26.162124 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:26.162362 kubelet[2029]: I1002 19:30:26.162127 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:26.162362 kubelet[2029]: I1002 19:30:26.162142 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:26.162362 kubelet[2029]: I1002 19:30:26.162160 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-hostproc" (OuterVolumeSpecName: "hostproc") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:26.162362 kubelet[2029]: I1002 19:30:26.162218 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:26.162362 kubelet[2029]: W1002 19:30:26.162319 2029 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:30:26.164713 kubelet[2029]: I1002 19:30:26.164423 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:30:26.164713 kubelet[2029]: I1002 19:30:26.164671 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:30:26.165206 kubelet[2029]: I1002 19:30:26.165178 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:30:26.166013 kubelet[2029]: I1002 19:30:26.165551 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:30:26.166099 kubelet[2029]: I1002 19:30:26.166049 2029 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-kube-api-access-dhwz6" (OuterVolumeSpecName: "kube-api-access-dhwz6") pod "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe" (UID: "b9aee0ea-4d72-4de1-87ab-4106ee37a8fe"). InnerVolumeSpecName "kube-api-access-dhwz6". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:30:26.166053 systemd[1]: var-lib-kubelet-pods-b9aee0ea\x2d4d72\x2d4de1\x2d87ab\x2d4106ee37a8fe-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:30:26.166146 systemd[1]: var-lib-kubelet-pods-b9aee0ea\x2d4d72\x2d4de1\x2d87ab\x2d4106ee37a8fe-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:30:26.166195 systemd[1]: var-lib-kubelet-pods-b9aee0ea\x2d4d72\x2d4de1\x2d87ab\x2d4106ee37a8fe-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:30:26.168038 systemd[1]: var-lib-kubelet-pods-b9aee0ea\x2d4d72\x2d4de1\x2d87ab\x2d4106ee37a8fe-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2ddhwz6.mount: Deactivated successfully. Oct 2 19:30:26.262530 kubelet[2029]: I1002 19:30:26.262393 2029 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.262530 kubelet[2029]: I1002 19:30:26.262442 2029 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.262530 kubelet[2029]: I1002 19:30:26.262453 2029 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.262530 kubelet[2029]: I1002 19:30:26.262462 2029 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.262530 kubelet[2029]: I1002 19:30:26.262472 2029 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.262530 kubelet[2029]: I1002 19:30:26.262480 2029 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.262530 kubelet[2029]: I1002 19:30:26.262489 2029 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-dhwz6\" (UniqueName: \"kubernetes.io/projected/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-kube-api-access-dhwz6\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.262530 kubelet[2029]: I1002 19:30:26.262497 2029 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.262530 kubelet[2029]: I1002 19:30:26.262505 2029 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.262530 kubelet[2029]: I1002 19:30:26.262513 2029 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.262530 kubelet[2029]: I1002 19:30:26.262521 2029 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.262530 kubelet[2029]: I1002 19:30:26.262529 2029 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:26.991263 kubelet[2029]: I1002 19:30:26.991221 2029 scope.go:115] "RemoveContainer" containerID="9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0" Oct 2 19:30:26.992215 env[1103]: time="2023-10-02T19:30:26.992177863Z" level=info msg="RemoveContainer for \"9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0\"" Oct 2 19:30:26.995196 systemd[1]: Removed slice kubepods-burstable-podb9aee0ea_4d72_4de1_87ab_4106ee37a8fe.slice. Oct 2 19:30:26.996172 env[1103]: time="2023-10-02T19:30:26.995687198Z" level=info msg="RemoveContainer for \"9a2e567d6a7b30d1a573fd3ad691efcf4aaa2c3feb912f81972ef83ab25eb8e0\" returns successfully" Oct 2 19:30:27.041712 update_engine[1096]: I1002 19:30:27.041656 1096 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:30:27.041712 update_engine[1096]: I1002 19:30:27.041697 1096 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:30:27.042978 update_engine[1096]: I1002 19:30:27.042955 1096 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:30:27.043282 update_engine[1096]: I1002 19:30:27.043259 1096 omaha_request_params.cc:62] Current group set to lts Oct 2 19:30:27.044486 update_engine[1096]: I1002 19:30:27.044461 1096 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:30:27.044486 update_engine[1096]: I1002 19:30:27.044471 1096 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:30:27.044486 update_engine[1096]: I1002 19:30:27.044488 1096 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:30:27.044615 update_engine[1096]: I1002 19:30:27.044515 1096 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:30:27.044615 update_engine[1096]: I1002 19:30:27.044562 1096 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:30:27.044615 update_engine[1096]: I1002 19:30:27.044566 1096 omaha_request_action.cc:269] Request: Oct 2 19:30:27.044615 update_engine[1096]: Oct 2 19:30:27.044615 update_engine[1096]: Oct 2 19:30:27.044615 update_engine[1096]: Oct 2 19:30:27.044615 update_engine[1096]: Oct 2 19:30:27.044615 update_engine[1096]: Oct 2 19:30:27.044615 update_engine[1096]: Oct 2 19:30:27.044615 update_engine[1096]: Oct 2 19:30:27.044615 update_engine[1096]: Oct 2 19:30:27.044615 update_engine[1096]: I1002 19:30:27.044569 1096 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:30:27.044977 locksmithd[1136]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:30:27.047287 update_engine[1096]: I1002 19:30:27.047262 1096 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:30:27.047430 update_engine[1096]: I1002 19:30:27.047413 1096 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:30:27.433405 kubelet[2029]: I1002 19:30:27.433288 2029 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=b9aee0ea-4d72-4de1-87ab-4106ee37a8fe path="/var/lib/kubelet/pods/b9aee0ea-4d72-4de1-87ab-4106ee37a8fe/volumes"