Oct 2 19:24:46.786465 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:24:46.786484 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:24:46.786492 kernel: BIOS-provided physical RAM map: Oct 2 19:24:46.786498 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:24:46.786503 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:24:46.786508 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:24:46.786515 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdcfff] usable Oct 2 19:24:46.786520 kernel: BIOS-e820: [mem 0x000000009cfdd000-0x000000009cffffff] reserved Oct 2 19:24:46.786527 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Oct 2 19:24:46.786533 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:24:46.786538 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Oct 2 19:24:46.786543 kernel: NX (Execute Disable) protection: active Oct 2 19:24:46.786549 kernel: SMBIOS 2.8 present. Oct 2 19:24:46.786554 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Oct 2 19:24:46.786562 kernel: Hypervisor detected: KVM Oct 2 19:24:46.786568 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:24:46.786574 kernel: kvm-clock: cpu 0, msr ef8a001, primary cpu clock Oct 2 19:24:46.786580 kernel: kvm-clock: using sched offset of 2124444212 cycles Oct 2 19:24:46.786586 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:24:46.786592 kernel: tsc: Detected 2794.748 MHz processor Oct 2 19:24:46.786598 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:24:46.786604 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:24:46.786610 kernel: last_pfn = 0x9cfdd max_arch_pfn = 0x400000000 Oct 2 19:24:46.786617 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:24:46.786623 kernel: Using GB pages for direct mapping Oct 2 19:24:46.786629 kernel: ACPI: Early table checksum verification disabled Oct 2 19:24:46.786635 kernel: ACPI: RSDP 0x00000000000F59C0 000014 (v00 BOCHS ) Oct 2 19:24:46.786641 kernel: ACPI: RSDT 0x000000009CFE1BDD 000034 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:24:46.786653 kernel: ACPI: FACP 0x000000009CFE1A79 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:24:46.786659 kernel: ACPI: DSDT 0x000000009CFE0040 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:24:46.786665 kernel: ACPI: FACS 0x000000009CFE0000 000040 Oct 2 19:24:46.786671 kernel: ACPI: APIC 0x000000009CFE1AED 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:24:46.786678 kernel: ACPI: HPET 0x000000009CFE1B7D 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:24:46.786684 kernel: ACPI: WAET 0x000000009CFE1BB5 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:24:46.786690 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe1a79-0x9cfe1aec] Oct 2 19:24:46.786696 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe1a78] Oct 2 19:24:46.786701 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Oct 2 19:24:46.786707 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe1aed-0x9cfe1b7c] Oct 2 19:24:46.786713 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe1b7d-0x9cfe1bb4] Oct 2 19:24:46.786719 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe1bb5-0x9cfe1bdc] Oct 2 19:24:46.786729 kernel: No NUMA configuration found Oct 2 19:24:46.786735 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdcfff] Oct 2 19:24:46.786741 kernel: NODE_DATA(0) allocated [mem 0x9cfd7000-0x9cfdcfff] Oct 2 19:24:46.786748 kernel: Zone ranges: Oct 2 19:24:46.786754 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:24:46.786761 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdcfff] Oct 2 19:24:46.786768 kernel: Normal empty Oct 2 19:24:46.786774 kernel: Movable zone start for each node Oct 2 19:24:46.786780 kernel: Early memory node ranges Oct 2 19:24:46.786787 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:24:46.786793 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdcfff] Oct 2 19:24:46.786799 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdcfff] Oct 2 19:24:46.786806 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:24:46.786812 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:24:46.786818 kernel: On node 0, zone DMA32: 12323 pages in unavailable ranges Oct 2 19:24:46.786826 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 2 19:24:46.786832 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:24:46.786838 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:24:46.786845 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:24:46.786851 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:24:46.786857 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:24:46.786864 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:24:46.786870 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:24:46.786876 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:24:46.786884 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:24:46.786890 kernel: TSC deadline timer available Oct 2 19:24:46.786896 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Oct 2 19:24:46.786902 kernel: kvm-guest: KVM setup pv remote TLB flush Oct 2 19:24:46.786918 kernel: kvm-guest: setup PV sched yield Oct 2 19:24:46.786924 kernel: [mem 0x9d000000-0xfeffbfff] available for PCI devices Oct 2 19:24:46.786930 kernel: Booting paravirtualized kernel on KVM Oct 2 19:24:46.786937 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:24:46.786944 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Oct 2 19:24:46.786951 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u524288 Oct 2 19:24:46.786958 kernel: pcpu-alloc: s185624 r8192 d31464 u524288 alloc=1*2097152 Oct 2 19:24:46.786964 kernel: pcpu-alloc: [0] 0 1 2 3 Oct 2 19:24:46.786970 kernel: kvm-guest: setup async PF for cpu 0 Oct 2 19:24:46.786976 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Oct 2 19:24:46.786983 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:24:46.786989 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:24:46.786996 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632733 Oct 2 19:24:46.787002 kernel: Policy zone: DMA32 Oct 2 19:24:46.787009 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:24:46.787017 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:24:46.787024 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:24:46.787030 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:24:46.787037 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:24:46.787043 kernel: Memory: 2438768K/2571756K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 132728K reserved, 0K cma-reserved) Oct 2 19:24:46.787050 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:24:46.787056 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:24:46.787063 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:24:46.787071 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:24:46.787078 kernel: rcu: RCU event tracing is enabled. Oct 2 19:24:46.787084 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:24:46.787091 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:24:46.787097 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:24:46.787104 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:24:46.787110 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:24:46.787116 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Oct 2 19:24:46.787123 kernel: random: crng init done Oct 2 19:24:46.787130 kernel: Console: colour VGA+ 80x25 Oct 2 19:24:46.787137 kernel: printk: console [ttyS0] enabled Oct 2 19:24:46.787143 kernel: ACPI: Core revision 20210730 Oct 2 19:24:46.787149 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Oct 2 19:24:46.787156 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:24:46.787162 kernel: x2apic enabled Oct 2 19:24:46.787168 kernel: Switched APIC routing to physical x2apic. Oct 2 19:24:46.787175 kernel: kvm-guest: setup PV IPIs Oct 2 19:24:46.787181 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 19:24:46.787188 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 19:24:46.787195 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Oct 2 19:24:46.787201 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Oct 2 19:24:46.787207 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Oct 2 19:24:46.787214 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Oct 2 19:24:46.787220 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:24:46.787227 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:24:46.787233 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:24:46.787240 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:24:46.787252 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Oct 2 19:24:46.787258 kernel: RETBleed: Mitigation: untrained return thunk Oct 2 19:24:46.787265 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Oct 2 19:24:46.787273 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Oct 2 19:24:46.787280 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:24:46.787287 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:24:46.787293 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:24:46.787300 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:24:46.787307 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Oct 2 19:24:46.787315 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:24:46.787322 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:24:46.787328 kernel: LSM: Security Framework initializing Oct 2 19:24:46.787335 kernel: SELinux: Initializing. Oct 2 19:24:46.787341 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:24:46.787348 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:24:46.787355 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Oct 2 19:24:46.787363 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Oct 2 19:24:46.787370 kernel: ... version: 0 Oct 2 19:24:46.787376 kernel: ... bit width: 48 Oct 2 19:24:46.787383 kernel: ... generic registers: 6 Oct 2 19:24:46.787390 kernel: ... value mask: 0000ffffffffffff Oct 2 19:24:46.787396 kernel: ... max period: 00007fffffffffff Oct 2 19:24:46.787403 kernel: ... fixed-purpose events: 0 Oct 2 19:24:46.787410 kernel: ... event mask: 000000000000003f Oct 2 19:24:46.787416 kernel: signal: max sigframe size: 1776 Oct 2 19:24:46.787424 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:24:46.787431 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:24:46.787437 kernel: x86: Booting SMP configuration: Oct 2 19:24:46.787444 kernel: .... node #0, CPUs: #1 Oct 2 19:24:46.787450 kernel: kvm-clock: cpu 1, msr ef8a041, secondary cpu clock Oct 2 19:24:46.787457 kernel: kvm-guest: setup async PF for cpu 1 Oct 2 19:24:46.787464 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Oct 2 19:24:46.787470 kernel: #2 Oct 2 19:24:46.787477 kernel: kvm-clock: cpu 2, msr ef8a081, secondary cpu clock Oct 2 19:24:46.787484 kernel: kvm-guest: setup async PF for cpu 2 Oct 2 19:24:46.787491 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Oct 2 19:24:46.787498 kernel: #3 Oct 2 19:24:46.787505 kernel: kvm-clock: cpu 3, msr ef8a0c1, secondary cpu clock Oct 2 19:24:46.787511 kernel: kvm-guest: setup async PF for cpu 3 Oct 2 19:24:46.787518 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Oct 2 19:24:46.787525 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:24:46.787531 kernel: smpboot: Max logical packages: 1 Oct 2 19:24:46.787538 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Oct 2 19:24:46.787545 kernel: devtmpfs: initialized Oct 2 19:24:46.787553 kernel: x86/mm: Memory block size: 128MB Oct 2 19:24:46.787560 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:24:46.787567 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:24:46.787573 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:24:46.787580 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:24:46.787587 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:24:46.787593 kernel: audit: type=2000 audit(1696274687.098:1): state=initialized audit_enabled=0 res=1 Oct 2 19:24:46.787600 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:24:46.787607 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:24:46.787614 kernel: cpuidle: using governor menu Oct 2 19:24:46.787621 kernel: ACPI: bus type PCI registered Oct 2 19:24:46.787628 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:24:46.787634 kernel: dca service started, version 1.12.1 Oct 2 19:24:46.787641 kernel: PCI: Using configuration type 1 for base access Oct 2 19:24:46.787652 kernel: PCI: Using configuration type 1 for extended access Oct 2 19:24:46.787659 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:24:46.787666 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:24:46.787672 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:24:46.787680 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:24:46.787687 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:24:46.787694 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:24:46.787701 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:24:46.787707 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:24:46.787714 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:24:46.787721 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:24:46.787728 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:24:46.787734 kernel: ACPI: Interpreter enabled Oct 2 19:24:46.787742 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 19:24:46.787749 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:24:46.787755 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:24:46.787790 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 19:24:46.787802 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:24:46.787991 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:24:46.788003 kernel: acpiphp: Slot [3] registered Oct 2 19:24:46.788010 kernel: acpiphp: Slot [4] registered Oct 2 19:24:46.788019 kernel: acpiphp: Slot [5] registered Oct 2 19:24:46.788026 kernel: acpiphp: Slot [6] registered Oct 2 19:24:46.788033 kernel: acpiphp: Slot [7] registered Oct 2 19:24:46.788039 kernel: acpiphp: Slot [8] registered Oct 2 19:24:46.788046 kernel: acpiphp: Slot [9] registered Oct 2 19:24:46.788053 kernel: acpiphp: Slot [10] registered Oct 2 19:24:46.788059 kernel: acpiphp: Slot [11] registered Oct 2 19:24:46.788066 kernel: acpiphp: Slot [12] registered Oct 2 19:24:46.788072 kernel: acpiphp: Slot [13] registered Oct 2 19:24:46.788079 kernel: acpiphp: Slot [14] registered Oct 2 19:24:46.788087 kernel: acpiphp: Slot [15] registered Oct 2 19:24:46.788094 kernel: acpiphp: Slot [16] registered Oct 2 19:24:46.788100 kernel: acpiphp: Slot [17] registered Oct 2 19:24:46.788107 kernel: acpiphp: Slot [18] registered Oct 2 19:24:46.788113 kernel: acpiphp: Slot [19] registered Oct 2 19:24:46.788120 kernel: acpiphp: Slot [20] registered Oct 2 19:24:46.788126 kernel: acpiphp: Slot [21] registered Oct 2 19:24:46.788133 kernel: acpiphp: Slot [22] registered Oct 2 19:24:46.788140 kernel: acpiphp: Slot [23] registered Oct 2 19:24:46.788147 kernel: acpiphp: Slot [24] registered Oct 2 19:24:46.788154 kernel: acpiphp: Slot [25] registered Oct 2 19:24:46.788160 kernel: acpiphp: Slot [26] registered Oct 2 19:24:46.788167 kernel: acpiphp: Slot [27] registered Oct 2 19:24:46.788174 kernel: acpiphp: Slot [28] registered Oct 2 19:24:46.788180 kernel: acpiphp: Slot [29] registered Oct 2 19:24:46.788187 kernel: acpiphp: Slot [30] registered Oct 2 19:24:46.788193 kernel: acpiphp: Slot [31] registered Oct 2 19:24:46.788200 kernel: PCI host bridge to bus 0000:00 Oct 2 19:24:46.789558 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:24:46.789629 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:24:46.789696 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:24:46.789756 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Oct 2 19:24:46.789814 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Oct 2 19:24:46.789874 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:24:46.789967 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:24:46.790047 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:24:46.790126 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 19:24:46.790194 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Oct 2 19:24:46.790261 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 19:24:46.790327 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 19:24:46.790394 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 19:24:46.790465 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 19:24:46.790556 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 19:24:46.790714 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Oct 2 19:24:46.790784 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Oct 2 19:24:46.790862 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Oct 2 19:24:46.790941 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Oct 2 19:24:46.791010 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Oct 2 19:24:46.791081 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Oct 2 19:24:46.791148 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:24:46.791222 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:24:46.791290 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc09f] Oct 2 19:24:46.791360 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Oct 2 19:24:46.791495 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Oct 2 19:24:46.791573 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 19:24:46.791651 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 19:24:46.791722 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Oct 2 19:24:46.791790 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Oct 2 19:24:46.791864 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Oct 2 19:24:46.791943 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0a0-0xc0bf] Oct 2 19:24:46.792011 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Oct 2 19:24:46.792080 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Oct 2 19:24:46.792150 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Oct 2 19:24:46.792159 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:24:46.792166 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:24:46.792173 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:24:46.792180 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:24:46.792187 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:24:46.792194 kernel: iommu: Default domain type: Translated Oct 2 19:24:46.792201 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:24:46.792267 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 19:24:46.792337 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:24:46.792404 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 19:24:46.792413 kernel: vgaarb: loaded Oct 2 19:24:46.792420 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:24:46.792427 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:24:46.792434 kernel: PTP clock support registered Oct 2 19:24:46.792441 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:24:46.792448 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:24:46.792457 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:24:46.792465 kernel: e820: reserve RAM buffer [mem 0x9cfdd000-0x9fffffff] Oct 2 19:24:46.792471 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Oct 2 19:24:46.792478 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Oct 2 19:24:46.792485 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:24:46.792492 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:24:46.792499 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:24:46.792506 kernel: pnp: PnP ACPI init Oct 2 19:24:46.792581 kernel: pnp 00:02: [dma 2] Oct 2 19:24:46.792593 kernel: pnp: PnP ACPI: found 6 devices Oct 2 19:24:46.792600 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:24:46.792607 kernel: NET: Registered PF_INET protocol family Oct 2 19:24:46.792614 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:24:46.792621 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:24:46.792628 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:24:46.792635 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:24:46.792650 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:24:46.792659 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:24:46.792666 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:24:46.792673 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:24:46.792679 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:24:46.792686 kernel: NET: Registered PF_XDP protocol family Oct 2 19:24:46.792749 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:24:46.792810 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:24:46.792871 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:24:46.792945 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Oct 2 19:24:46.793012 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Oct 2 19:24:46.793080 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 19:24:46.793196 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:24:46.793267 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:24:46.793276 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:24:46.793283 kernel: Initialise system trusted keyrings Oct 2 19:24:46.793290 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:24:46.793297 kernel: Key type asymmetric registered Oct 2 19:24:46.793306 kernel: Asymmetric key parser 'x509' registered Oct 2 19:24:46.793313 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:24:46.793320 kernel: io scheduler mq-deadline registered Oct 2 19:24:46.793326 kernel: io scheduler kyber registered Oct 2 19:24:46.793334 kernel: io scheduler bfq registered Oct 2 19:24:46.793340 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:24:46.793348 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 19:24:46.793355 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Oct 2 19:24:46.793362 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 19:24:46.793370 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:24:46.793377 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:24:46.793383 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:24:46.793390 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:24:46.793397 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:24:46.793468 kernel: rtc_cmos 00:05: RTC can wake from S4 Oct 2 19:24:46.793478 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:24:46.793580 kernel: rtc_cmos 00:05: registered as rtc0 Oct 2 19:24:46.793666 kernel: rtc_cmos 00:05: setting system clock to 2023-10-02T19:24:46 UTC (1696274686) Oct 2 19:24:46.793728 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Oct 2 19:24:46.793738 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:24:46.793744 kernel: Segment Routing with IPv6 Oct 2 19:24:46.793751 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:24:46.793758 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:24:46.793765 kernel: Key type dns_resolver registered Oct 2 19:24:46.793772 kernel: IPI shorthand broadcast: enabled Oct 2 19:24:46.793779 kernel: sched_clock: Marking stable (343302447, 70091438)->(436978100, -23584215) Oct 2 19:24:46.793787 kernel: registered taskstats version 1 Oct 2 19:24:46.793795 kernel: Loading compiled-in X.509 certificates Oct 2 19:24:46.793802 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:24:46.793808 kernel: Key type .fscrypt registered Oct 2 19:24:46.793815 kernel: Key type fscrypt-provisioning registered Oct 2 19:24:46.793822 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:24:46.793829 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:24:46.793836 kernel: ima: No architecture policies found Oct 2 19:24:46.793844 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:24:46.793851 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:24:46.793858 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:24:46.793865 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:24:46.793871 kernel: Run /init as init process Oct 2 19:24:46.793878 kernel: with arguments: Oct 2 19:24:46.793885 kernel: /init Oct 2 19:24:46.793892 kernel: with environment: Oct 2 19:24:46.793922 kernel: HOME=/ Oct 2 19:24:46.793929 kernel: TERM=linux Oct 2 19:24:46.793937 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:24:46.793948 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:24:46.793958 systemd[1]: Detected virtualization kvm. Oct 2 19:24:46.793966 systemd[1]: Detected architecture x86-64. Oct 2 19:24:46.793973 systemd[1]: Running in initrd. Oct 2 19:24:46.793980 systemd[1]: No hostname configured, using default hostname. Oct 2 19:24:46.793988 systemd[1]: Hostname set to . Oct 2 19:24:46.793997 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:24:46.794005 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:24:46.794012 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:24:46.794019 systemd[1]: Reached target cryptsetup.target. Oct 2 19:24:46.794146 systemd[1]: Reached target paths.target. Oct 2 19:24:46.794153 systemd[1]: Reached target slices.target. Oct 2 19:24:46.794161 systemd[1]: Reached target swap.target. Oct 2 19:24:46.794168 systemd[1]: Reached target timers.target. Oct 2 19:24:46.794178 systemd[1]: Listening on iscsid.socket. Oct 2 19:24:46.794186 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:24:46.794193 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:24:46.794201 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:24:46.794208 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:24:46.794216 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:24:46.794224 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:24:46.794231 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:24:46.794255 systemd[1]: Reached target sockets.target. Oct 2 19:24:46.794263 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:24:46.794271 systemd[1]: Finished network-cleanup.service. Oct 2 19:24:46.794279 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:24:46.794286 systemd[1]: Starting systemd-journald.service... Oct 2 19:24:46.794294 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:24:46.794303 systemd[1]: Starting systemd-resolved.service... Oct 2 19:24:46.794311 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:24:46.794318 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:24:46.794330 systemd-journald[197]: Journal started Oct 2 19:24:46.794377 systemd-journald[197]: Runtime Journal (/run/log/journal/a6e2329e6a2541d783650cf028ea9a52) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:24:46.789551 systemd-modules-load[198]: Inserted module 'overlay' Oct 2 19:24:46.807399 systemd-resolved[199]: Positive Trust Anchors: Oct 2 19:24:46.807416 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:24:46.807442 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:24:46.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.809847 systemd-resolved[199]: Defaulting to hostname 'linux'. Oct 2 19:24:46.811113 systemd[1]: Started systemd-journald.service. Oct 2 19:24:46.811130 kernel: audit: type=1130 audit(1696274686.805:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.815225 systemd[1]: Started systemd-resolved.service. Oct 2 19:24:46.819247 kernel: audit: type=1130 audit(1696274686.814:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.819260 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:24:46.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.819383 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:24:46.822659 kernel: audit: type=1130 audit(1696274686.818:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.822672 kernel: Bridge firewalling registered Oct 2 19:24:46.822634 systemd-modules-load[198]: Inserted module 'br_netfilter' Oct 2 19:24:46.825196 kernel: audit: type=1130 audit(1696274686.821:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.825306 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:24:46.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.826497 systemd[1]: Reached target nss-lookup.target. Oct 2 19:24:46.829344 kernel: audit: type=1130 audit(1696274686.825:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.830088 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:24:46.831607 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:24:46.836069 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:24:46.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.839925 kernel: audit: type=1130 audit(1696274686.837:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.843932 kernel: SCSI subsystem initialized Oct 2 19:24:46.844823 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:24:46.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.847943 kernel: audit: type=1130 audit(1696274686.845:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.846697 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:24:46.854305 dracut-cmdline[215]: dracut-dracut-053 Oct 2 19:24:46.856587 dracut-cmdline[215]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:24:46.862332 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:24:46.862350 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:24:46.862359 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:24:46.862550 systemd-modules-load[198]: Inserted module 'dm_multipath' Oct 2 19:24:46.863560 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:24:46.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.865543 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:24:46.868531 kernel: audit: type=1130 audit(1696274686.864:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.871327 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:24:46.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.874930 kernel: audit: type=1130 audit(1696274686.870:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.915933 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:24:46.927937 kernel: iscsi: registered transport (tcp) Oct 2 19:24:46.945936 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:24:46.946003 kernel: QLogic iSCSI HBA Driver Oct 2 19:24:46.965690 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:24:46.965000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:46.967009 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:24:47.010924 kernel: raid6: avx2x4 gen() 31151 MB/s Oct 2 19:24:47.027928 kernel: raid6: avx2x4 xor() 7652 MB/s Oct 2 19:24:47.044933 kernel: raid6: avx2x2 gen() 32729 MB/s Oct 2 19:24:47.061925 kernel: raid6: avx2x2 xor() 19270 MB/s Oct 2 19:24:47.078930 kernel: raid6: avx2x1 gen() 26052 MB/s Oct 2 19:24:47.095933 kernel: raid6: avx2x1 xor() 15401 MB/s Oct 2 19:24:47.112928 kernel: raid6: sse2x4 gen() 14872 MB/s Oct 2 19:24:47.129932 kernel: raid6: sse2x4 xor() 7505 MB/s Oct 2 19:24:47.146923 kernel: raid6: sse2x2 gen() 16371 MB/s Oct 2 19:24:47.163921 kernel: raid6: sse2x2 xor() 9865 MB/s Oct 2 19:24:47.180918 kernel: raid6: sse2x1 gen() 12389 MB/s Oct 2 19:24:47.198274 kernel: raid6: sse2x1 xor() 7817 MB/s Oct 2 19:24:47.198309 kernel: raid6: using algorithm avx2x2 gen() 32729 MB/s Oct 2 19:24:47.198319 kernel: raid6: .... xor() 19270 MB/s, rmw enabled Oct 2 19:24:47.198327 kernel: raid6: using avx2x2 recovery algorithm Oct 2 19:24:47.209930 kernel: xor: automatically using best checksumming function avx Oct 2 19:24:47.298933 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:24:47.306997 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:24:47.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.307000 audit: BPF prog-id=7 op=LOAD Oct 2 19:24:47.307000 audit: BPF prog-id=8 op=LOAD Oct 2 19:24:47.308443 systemd[1]: Starting systemd-udevd.service... Oct 2 19:24:47.319774 systemd-udevd[400]: Using default interface naming scheme 'v252'. Oct 2 19:24:47.323575 systemd[1]: Started systemd-udevd.service. Oct 2 19:24:47.324245 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:24:47.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.333964 dracut-pre-trigger[403]: rd.md=0: removing MD RAID activation Oct 2 19:24:47.358613 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:24:47.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.359562 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:24:47.392593 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:24:47.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:47.420930 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:24:47.422929 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:24:47.426181 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:24:47.431929 kernel: libata version 3.00 loaded. Oct 2 19:24:47.434922 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 19:24:47.437923 kernel: scsi host0: ata_piix Oct 2 19:24:47.439932 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:24:47.439981 kernel: AES CTR mode by8 optimization enabled Oct 2 19:24:47.440006 kernel: scsi host1: ata_piix Oct 2 19:24:47.441365 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Oct 2 19:24:47.441390 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Oct 2 19:24:47.460934 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (457) Oct 2 19:24:47.464796 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:24:47.487495 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:24:47.493006 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:24:47.493083 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:24:47.497711 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:24:47.498928 systemd[1]: Starting disk-uuid.service... Oct 2 19:24:47.528945 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:24:47.532931 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:24:47.595943 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Oct 2 19:24:47.595998 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Oct 2 19:24:47.622937 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Oct 2 19:24:47.623095 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:24:47.640937 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Oct 2 19:24:48.535938 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:24:48.536223 disk-uuid[517]: The operation has completed successfully. Oct 2 19:24:48.558776 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:24:48.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.558849 systemd[1]: Finished disk-uuid.service. Oct 2 19:24:48.563086 systemd[1]: Starting verity-setup.service... Oct 2 19:24:48.575934 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:24:48.604352 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:24:48.605877 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:24:48.608337 systemd[1]: Finished verity-setup.service. Oct 2 19:24:48.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.671931 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:24:48.672400 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:24:48.673427 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:24:48.674874 systemd[1]: Starting ignition-setup.service... Oct 2 19:24:48.676382 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:24:48.682984 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:24:48.683011 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:24:48.683020 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:24:48.690172 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:24:48.697246 systemd[1]: Finished ignition-setup.service. Oct 2 19:24:48.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.698477 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:24:48.732639 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:24:48.735137 systemd[1]: Starting systemd-networkd.service... Oct 2 19:24:48.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.733000 audit: BPF prog-id=9 op=LOAD Oct 2 19:24:48.752667 systemd-networkd[695]: lo: Link UP Oct 2 19:24:48.752676 systemd-networkd[695]: lo: Gained carrier Oct 2 19:24:48.754011 systemd-networkd[695]: Enumeration completed Oct 2 19:24:48.754079 systemd[1]: Started systemd-networkd.service. Oct 2 19:24:48.755706 systemd[1]: Reached target network.target. Oct 2 19:24:48.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.757128 systemd-networkd[695]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:24:48.757263 systemd[1]: Starting iscsiuio.service... Oct 2 19:24:48.757872 systemd-networkd[695]: eth0: Link UP Oct 2 19:24:48.757874 systemd-networkd[695]: eth0: Gained carrier Oct 2 19:24:48.764038 systemd[1]: Started iscsiuio.service. Oct 2 19:24:48.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.765424 systemd[1]: Starting iscsid.service... Oct 2 19:24:48.768583 iscsid[700]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:24:48.768583 iscsid[700]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:24:48.768583 iscsid[700]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:24:48.768583 iscsid[700]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:24:48.768583 iscsid[700]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:24:48.768583 iscsid[700]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:24:48.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.769586 systemd[1]: Started iscsid.service. Oct 2 19:24:48.770651 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:24:48.778198 systemd-networkd[695]: eth0: DHCPv4 address 10.0.0.8/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:24:48.779723 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:24:48.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.780385 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:24:48.781401 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:24:48.782469 systemd[1]: Reached target remote-fs.target. Oct 2 19:24:48.784051 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:24:48.787968 ignition[620]: Ignition 2.14.0 Oct 2 19:24:48.787978 ignition[620]: Stage: fetch-offline Oct 2 19:24:48.788610 ignition[620]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:24:48.788622 ignition[620]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:24:48.789633 ignition[620]: parsed url from cmdline: "" Oct 2 19:24:48.789637 ignition[620]: no config URL provided Oct 2 19:24:48.789642 ignition[620]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:24:48.790296 ignition[620]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:24:48.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.790892 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:24:48.790321 ignition[620]: op(1): [started] loading QEMU firmware config module Oct 2 19:24:48.790326 ignition[620]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:24:48.796074 ignition[620]: op(1): [finished] loading QEMU firmware config module Oct 2 19:24:48.796092 ignition[620]: QEMU firmware config was not found. Ignoring... Oct 2 19:24:48.823619 ignition[620]: parsing config with SHA512: f01b45eea46aef4e30f775579f296094554673051167fb19ce8478f973ce5ddb25c7503170328b88255c1b189b27c93b0be719af1e42bc5582899996ef1d486d Oct 2 19:24:48.845272 unknown[620]: fetched base config from "system" Oct 2 19:24:48.845283 unknown[620]: fetched user config from "qemu" Oct 2 19:24:48.846225 ignition[620]: fetch-offline: fetch-offline passed Oct 2 19:24:48.846287 ignition[620]: Ignition finished successfully Oct 2 19:24:48.847235 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:24:48.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.848312 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:24:48.848998 systemd[1]: Starting ignition-kargs.service... Oct 2 19:24:48.856451 ignition[717]: Ignition 2.14.0 Oct 2 19:24:48.856458 ignition[717]: Stage: kargs Oct 2 19:24:48.856542 ignition[717]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:24:48.856549 ignition[717]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:24:48.857471 ignition[717]: kargs: kargs passed Oct 2 19:24:48.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.858258 systemd[1]: Finished ignition-kargs.service. Oct 2 19:24:48.857503 ignition[717]: Ignition finished successfully Oct 2 19:24:48.859852 systemd[1]: Starting ignition-disks.service... Oct 2 19:24:48.865999 ignition[723]: Ignition 2.14.0 Oct 2 19:24:48.866009 ignition[723]: Stage: disks Oct 2 19:24:48.866090 ignition[723]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:24:48.866099 ignition[723]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:24:48.867222 ignition[723]: disks: disks passed Oct 2 19:24:48.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.867805 systemd[1]: Finished ignition-disks.service. Oct 2 19:24:48.867255 ignition[723]: Ignition finished successfully Oct 2 19:24:48.868864 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:24:48.869747 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:24:48.870267 systemd[1]: Reached target local-fs.target. Oct 2 19:24:48.870760 systemd[1]: Reached target sysinit.target. Oct 2 19:24:48.871687 systemd[1]: Reached target basic.target. Oct 2 19:24:48.872778 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:24:48.881560 systemd-fsck[731]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:24:48.885926 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:24:48.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.887474 systemd[1]: Mounting sysroot.mount... Oct 2 19:24:48.893929 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:24:48.894127 systemd[1]: Mounted sysroot.mount. Oct 2 19:24:48.894620 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:24:48.896211 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:24:48.896890 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:24:48.896930 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:24:48.896948 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:24:48.898350 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:24:48.899483 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:24:48.903026 initrd-setup-root[741]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:24:48.905810 initrd-setup-root[749]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:24:48.908091 initrd-setup-root[757]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:24:48.910394 initrd-setup-root[765]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:24:48.933124 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:24:48.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.933887 systemd[1]: Starting ignition-mount.service... Oct 2 19:24:48.935079 systemd[1]: Starting sysroot-boot.service... Oct 2 19:24:48.938627 bash[782]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:24:48.945614 ignition[784]: INFO : Ignition 2.14.0 Oct 2 19:24:48.945614 ignition[784]: INFO : Stage: mount Oct 2 19:24:48.947349 ignition[784]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:24:48.947349 ignition[784]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:24:48.947349 ignition[784]: INFO : mount: mount passed Oct 2 19:24:48.947349 ignition[784]: INFO : Ignition finished successfully Oct 2 19:24:48.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:48.947489 systemd[1]: Finished ignition-mount.service. Oct 2 19:24:48.951523 systemd[1]: Finished sysroot-boot.service. Oct 2 19:24:48.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:49.617325 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:24:49.623357 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (793) Oct 2 19:24:49.623386 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:24:49.623396 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:24:49.624391 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:24:49.626895 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:24:49.628594 systemd[1]: Starting ignition-files.service... Oct 2 19:24:49.640253 ignition[813]: INFO : Ignition 2.14.0 Oct 2 19:24:49.640253 ignition[813]: INFO : Stage: files Oct 2 19:24:49.641375 ignition[813]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:24:49.641375 ignition[813]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:24:49.642793 ignition[813]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:24:49.643728 ignition[813]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:24:49.643728 ignition[813]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:24:49.645715 ignition[813]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:24:49.645715 ignition[813]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:24:49.645715 ignition[813]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:24:49.645596 unknown[813]: wrote ssh authorized keys file for user: core Oct 2 19:24:49.649834 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:24:49.649834 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 19:24:49.813532 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:24:49.947281 ignition[813]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 19:24:49.947281 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:24:49.950580 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:24:49.950580 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:24:50.191539 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:24:50.257133 ignition[813]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 19:24:50.257133 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:24:50.260394 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:24:50.260394 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:24:50.354934 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:24:50.450071 systemd-networkd[695]: eth0: Gained IPv6LL Oct 2 19:24:51.112280 ignition[813]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Oct 2 19:24:51.114783 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:24:51.114783 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:24:51.114783 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:24:51.181850 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:24:52.593656 ignition[813]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Oct 2 19:24:52.595833 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:24:52.595833 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:24:52.595833 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:24:52.655078 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:24:53.375178 ignition[813]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Oct 2 19:24:53.377212 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:24:53.377212 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:24:53.377212 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:24:53.377212 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:24:53.377212 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:24:53.484640 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:24:53.566726 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:24:53.568443 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:24:53.568443 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:24:53.568443 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:24:53.568443 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(c): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(c): op(d): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(c): op(d): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(c): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(e): [started] processing unit "prepare-critools.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(e): op(f): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(e): op(f): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(e): [finished] processing unit "prepare-critools.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(10): [started] processing unit "coreos-metadata.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(10): op(11): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(10): op(11): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(10): [finished] processing unit "coreos-metadata.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(12): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:24:53.568443 ignition[813]: INFO : files: op(12): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:24:53.593466 ignition[813]: INFO : files: op(13): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:24:53.593466 ignition[813]: INFO : files: op(13): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:24:53.593466 ignition[813]: INFO : files: op(14): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:24:53.593466 ignition[813]: INFO : files: op(14): op(15): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:24:53.614874 ignition[813]: INFO : files: op(14): op(15): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:24:53.616063 ignition[813]: INFO : files: op(14): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:24:53.616063 ignition[813]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:24:53.616063 ignition[813]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:24:53.616063 ignition[813]: INFO : files: files passed Oct 2 19:24:53.616063 ignition[813]: INFO : Ignition finished successfully Oct 2 19:24:53.633138 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:24:53.633169 kernel: audit: type=1130 audit(1696274693.617:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.633185 kernel: audit: type=1130 audit(1696274693.626:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.633198 kernel: audit: type=1131 audit(1696274693.626:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.633215 kernel: audit: type=1130 audit(1696274693.633:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.616583 systemd[1]: Finished ignition-files.service. Oct 2 19:24:53.618400 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:24:53.622136 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:24:53.638783 initrd-setup-root-after-ignition[837]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:24:53.622633 systemd[1]: Starting ignition-quench.service... Oct 2 19:24:53.640408 initrd-setup-root-after-ignition[841]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:24:53.626634 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:24:53.626697 systemd[1]: Finished ignition-quench.service. Oct 2 19:24:53.629957 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:24:53.633178 systemd[1]: Reached target ignition-complete.target. Oct 2 19:24:53.636355 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:24:53.649657 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:24:53.649745 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:24:53.655786 kernel: audit: type=1130 audit(1696274693.650:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.655802 kernel: audit: type=1131 audit(1696274693.650:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.651171 systemd[1]: Reached target initrd-fs.target. Oct 2 19:24:53.655819 systemd[1]: Reached target initrd.target. Oct 2 19:24:53.656379 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:24:53.657096 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:24:53.667093 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:24:53.670736 kernel: audit: type=1130 audit(1696274693.666:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.668346 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:24:53.677456 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:24:53.694172 kernel: audit: type=1131 audit(1696274693.677:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.694187 kernel: audit: type=1131 audit(1696274693.683:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.694197 kernel: audit: type=1131 audit(1696274693.685:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.677633 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:24:53.677996 systemd[1]: Stopped target timers.target. Oct 2 19:24:53.678295 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:24:53.678416 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:24:53.696000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.678822 systemd[1]: Stopped target initrd.target. Oct 2 19:24:53.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.681180 systemd[1]: Stopped target basic.target. Oct 2 19:24:53.681395 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:24:53.701092 iscsid[700]: iscsid shutting down. Oct 2 19:24:53.681700 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:24:53.681969 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:24:53.682289 systemd[1]: Stopped target remote-fs.target. Oct 2 19:24:53.682594 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:24:53.682821 systemd[1]: Stopped target sysinit.target. Oct 2 19:24:53.683161 systemd[1]: Stopped target local-fs.target. Oct 2 19:24:53.683461 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:24:53.707275 ignition[854]: INFO : Ignition 2.14.0 Oct 2 19:24:53.707275 ignition[854]: INFO : Stage: umount Oct 2 19:24:53.707275 ignition[854]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:24:53.707275 ignition[854]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:24:53.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.683689 systemd[1]: Stopped target swap.target. Oct 2 19:24:53.711628 ignition[854]: INFO : umount: umount passed Oct 2 19:24:53.711628 ignition[854]: INFO : Ignition finished successfully Oct 2 19:24:53.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.683988 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:24:53.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.684076 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:24:53.684356 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:24:53.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.686672 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:24:53.686770 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:24:53.686922 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:24:53.717000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.687003 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:24:53.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.689344 systemd[1]: Stopped target paths.target. Oct 2 19:24:53.689565 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:24:53.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.692962 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:24:53.694286 systemd[1]: Stopped target slices.target. Oct 2 19:24:53.695402 systemd[1]: Stopped target sockets.target. Oct 2 19:24:53.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.696432 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:24:53.696562 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:24:53.697714 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:24:53.697823 systemd[1]: Stopped ignition-files.service. Oct 2 19:24:53.699461 systemd[1]: Stopping ignition-mount.service... Oct 2 19:24:53.700318 systemd[1]: Stopping iscsid.service... Oct 2 19:24:53.703063 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:24:53.707321 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:24:53.707535 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:24:53.708603 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:24:53.708752 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:24:53.711645 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:24:53.711736 systemd[1]: Stopped iscsid.service. Oct 2 19:24:53.713187 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:24:53.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.713250 systemd[1]: Stopped ignition-mount.service. Oct 2 19:24:53.714926 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:24:53.715008 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:24:53.741000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.716534 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:24:53.741000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.716560 systemd[1]: Closed iscsid.socket. Oct 2 19:24:53.717386 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:24:53.743000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.717424 systemd[1]: Stopped ignition-disks.service. Oct 2 19:24:53.718685 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:24:53.718723 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:24:53.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.720159 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:24:53.720198 systemd[1]: Stopped ignition-setup.service. Oct 2 19:24:53.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.720334 systemd[1]: Stopping iscsiuio.service... Oct 2 19:24:53.721802 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:24:53.722234 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:24:53.722311 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:24:53.751000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:24:53.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.723012 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:24:53.723095 systemd[1]: Stopped iscsiuio.service. Oct 2 19:24:53.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.724186 systemd[1]: Stopped target network.target. Oct 2 19:24:53.725239 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:24:53.725271 systemd[1]: Closed iscsiuio.socket. Oct 2 19:24:53.726170 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:24:53.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.726198 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:24:53.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.727250 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:24:53.728702 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:24:53.734948 systemd-networkd[695]: eth0: DHCPv6 lease lost Oct 2 19:24:53.762000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:24:53.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.736100 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:24:53.736183 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:24:53.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:53.738572 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:24:53.738608 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:24:53.739278 systemd[1]: Stopping network-cleanup.service... Oct 2 19:24:53.740272 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:24:53.740307 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:24:53.741435 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:24:53.741478 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:24:53.742664 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:24:53.742701 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:24:53.743786 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:24:53.745799 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:24:53.746240 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:24:53.746327 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:24:53.747869 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:24:53.747986 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:24:53.750146 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:24:53.750177 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:24:53.751349 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:24:53.751372 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:24:53.752544 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:24:53.752581 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:24:53.753655 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:24:53.753693 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:24:53.754834 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:24:53.754870 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:24:53.756520 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:24:53.757590 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:24:53.757630 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:24:53.759311 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:24:53.759349 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:24:53.759950 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:24:53.759984 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:24:53.761848 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:24:53.762286 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:24:53.762361 systemd[1]: Stopped network-cleanup.service. Oct 2 19:24:53.763564 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:24:53.763638 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:24:53.764825 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:24:53.766405 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:24:53.778182 systemd[1]: Switching root. Oct 2 19:24:53.797985 systemd-journald[197]: Journal stopped Oct 2 19:24:57.449900 systemd-journald[197]: Received SIGTERM from PID 1 (systemd). Oct 2 19:24:57.449974 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:24:57.449996 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:24:57.450014 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:24:57.450029 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:24:57.450045 kernel: SELinux: policy capability open_perms=1 Oct 2 19:24:57.450059 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:24:57.450076 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:24:57.450088 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:24:57.450101 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:24:57.450113 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:24:57.450125 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:24:57.450144 systemd[1]: Successfully loaded SELinux policy in 40.861ms. Oct 2 19:24:57.450165 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.747ms. Oct 2 19:24:57.450180 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:24:57.450194 systemd[1]: Detected virtualization kvm. Oct 2 19:24:57.450209 systemd[1]: Detected architecture x86-64. Oct 2 19:24:57.450223 systemd[1]: Detected first boot. Oct 2 19:24:57.450237 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:24:57.450250 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:24:57.450265 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:24:57.450280 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:24:57.450295 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:24:57.450311 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:24:57.450324 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:24:57.450339 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:24:57.450363 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:24:57.450377 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:24:57.450391 systemd[1]: Created slice system-getty.slice. Oct 2 19:24:57.450405 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:24:57.450419 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:24:57.450433 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:24:57.450450 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:24:57.450464 systemd[1]: Created slice user.slice. Oct 2 19:24:57.450483 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:24:57.450497 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:24:57.450511 systemd[1]: Set up automount boot.automount. Oct 2 19:24:57.450525 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:24:57.450539 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:24:57.450554 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:24:57.450568 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:24:57.450584 systemd[1]: Reached target integritysetup.target. Oct 2 19:24:57.450598 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:24:57.450617 systemd[1]: Reached target remote-fs.target. Oct 2 19:24:57.450631 systemd[1]: Reached target slices.target. Oct 2 19:24:57.450644 systemd[1]: Reached target swap.target. Oct 2 19:24:57.450658 systemd[1]: Reached target torcx.target. Oct 2 19:24:57.450673 systemd[1]: Reached target veritysetup.target. Oct 2 19:24:57.450687 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:24:57.450703 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:24:57.450717 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:24:57.450730 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:24:57.450744 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:24:57.450759 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:24:57.450774 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:24:57.450788 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:24:57.450801 systemd[1]: Mounting media.mount... Oct 2 19:24:57.450815 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:24:57.450831 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:24:57.450845 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:24:57.450858 systemd[1]: Mounting tmp.mount... Oct 2 19:24:57.450872 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:24:57.450886 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:24:57.450900 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:24:57.450939 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:24:57.450955 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:24:57.450970 systemd[1]: Starting modprobe@drm.service... Oct 2 19:24:57.450986 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:24:57.451000 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:24:57.451014 systemd[1]: Starting modprobe@loop.service... Oct 2 19:24:57.451028 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:24:57.451042 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:24:57.451057 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:24:57.451071 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:24:57.451086 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:24:57.451099 systemd[1]: Stopped systemd-journald.service. Oct 2 19:24:57.451116 systemd[1]: Starting systemd-journald.service... Oct 2 19:24:57.451129 kernel: loop: module loaded Oct 2 19:24:57.451148 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:24:57.451163 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:24:57.451178 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:24:57.451192 kernel: fuse: init (API version 7.34) Oct 2 19:24:57.451206 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:24:57.451220 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:24:57.451233 systemd[1]: Stopped verity-setup.service. Oct 2 19:24:57.451250 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:24:57.451264 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:24:57.451278 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:24:57.451291 systemd[1]: Mounted media.mount. Oct 2 19:24:57.451305 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:24:57.451319 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:24:57.451333 systemd[1]: Mounted tmp.mount. Oct 2 19:24:57.451353 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:24:57.451369 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:24:57.451387 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:24:57.451404 systemd-journald[956]: Journal started Oct 2 19:24:57.451455 systemd-journald[956]: Runtime Journal (/run/log/journal/a6e2329e6a2541d783650cf028ea9a52) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:24:53.870000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:24:55.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:24:55.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:24:55.256000 audit: BPF prog-id=10 op=LOAD Oct 2 19:24:55.256000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:24:55.256000 audit: BPF prog-id=11 op=LOAD Oct 2 19:24:55.256000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:24:57.350000 audit: BPF prog-id=12 op=LOAD Oct 2 19:24:57.350000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:24:57.350000 audit: BPF prog-id=13 op=LOAD Oct 2 19:24:57.350000 audit: BPF prog-id=14 op=LOAD Oct 2 19:24:57.350000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:24:57.350000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:24:57.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.362000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:24:57.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.424000 audit: BPF prog-id=15 op=LOAD Oct 2 19:24:57.424000 audit: BPF prog-id=16 op=LOAD Oct 2 19:24:57.424000 audit: BPF prog-id=17 op=LOAD Oct 2 19:24:57.424000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:24:57.424000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:24:57.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.447000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:24:57.447000 audit[956]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffd58e646e0 a2=4000 a3=7ffd58e6477c items=0 ppid=1 pid=956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:57.447000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:24:57.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.349985 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:24:55.314454 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:24:57.349995 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:24:55.314774 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:24:57.352356 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:24:57.452949 systemd[1]: Started systemd-journald.service. Oct 2 19:24:55.314793 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:24:55.314820 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:24:55.314829 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:24:55.314861 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:24:57.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:55.314874 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:24:55.315074 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:24:55.315107 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:24:55.315118 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:24:57.453727 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:24:55.315449 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:24:55.315483 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:24:57.453966 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:24:55.315499 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:24:55.315513 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:24:55.315528 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:24:55.315542 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:55Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:24:57.102218 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:57Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:24:57.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.102478 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:57Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:24:57.102571 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:57Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:24:57.102716 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:57Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:24:57.102768 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:57Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:24:57.102819 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:24:57Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:24:57.455272 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:24:57.455464 systemd[1]: Finished modprobe@drm.service. Oct 2 19:24:57.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.456335 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:24:57.456528 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:24:57.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.457587 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:24:57.457806 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:24:57.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.458652 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:24:57.458863 systemd[1]: Finished modprobe@loop.service. Oct 2 19:24:57.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.459805 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:24:57.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.460736 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:24:57.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.461953 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:24:57.462878 systemd[1]: Reached target network-pre.target. Oct 2 19:24:57.464457 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:24:57.465748 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:24:57.466511 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:24:57.467769 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:24:57.469038 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:24:57.469572 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:24:57.470357 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:24:57.470937 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:24:57.471673 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:24:57.473415 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:24:57.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.474073 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:24:57.474689 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:24:57.476483 systemd-journald[956]: Time spent on flushing to /var/log/journal/a6e2329e6a2541d783650cf028ea9a52 is 18.856ms for 1097 entries. Oct 2 19:24:57.476483 systemd-journald[956]: System Journal (/var/log/journal/a6e2329e6a2541d783650cf028ea9a52) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:24:57.541207 systemd-journald[956]: Received client request to flush runtime journal. Oct 2 19:24:57.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.477043 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:24:57.483554 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:24:57.541712 udevadm[990]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:24:57.484899 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:24:57.513576 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:24:57.514536 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:24:57.518636 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:24:57.523794 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:24:57.525395 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:24:57.542100 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:24:57.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.546477 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:24:57.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.916750 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:24:57.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.917000 audit: BPF prog-id=18 op=LOAD Oct 2 19:24:57.917000 audit: BPF prog-id=19 op=LOAD Oct 2 19:24:57.917000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:24:57.917000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:24:57.918614 systemd[1]: Starting systemd-udevd.service... Oct 2 19:24:57.932483 systemd-udevd[995]: Using default interface naming scheme 'v252'. Oct 2 19:24:57.945117 systemd[1]: Started systemd-udevd.service. Oct 2 19:24:57.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.946000 audit: BPF prog-id=20 op=LOAD Oct 2 19:24:57.947840 systemd[1]: Starting systemd-networkd.service... Oct 2 19:24:57.955000 audit: BPF prog-id=21 op=LOAD Oct 2 19:24:57.955000 audit: BPF prog-id=22 op=LOAD Oct 2 19:24:57.955000 audit: BPF prog-id=23 op=LOAD Oct 2 19:24:57.956753 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:24:57.963072 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:24:57.993934 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:24:57.994660 systemd[1]: Started systemd-userdbd.service. Oct 2 19:24:57.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:57.999973 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:24:57.998000 audit[1003]: AVC avc: denied { confidentiality } for pid=1003 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:24:57.998000 audit[1003]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=557979141700 a1=32194 a2=7f9543cf8bc5 a3=5 items=106 ppid=995 pid=1003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:57.998000 audit: CWD cwd="/" Oct 2 19:24:57.998000 audit: PATH item=0 name=(null) inode=1819 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=1 name=(null) inode=1820 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=2 name=(null) inode=1819 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=3 name=(null) inode=1821 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=4 name=(null) inode=1819 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=5 name=(null) inode=1822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=6 name=(null) inode=1822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=7 name=(null) inode=1823 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=8 name=(null) inode=1822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=9 name=(null) inode=1824 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=10 name=(null) inode=1822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=11 name=(null) inode=1825 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=12 name=(null) inode=1822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=13 name=(null) inode=1826 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=14 name=(null) inode=1822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=15 name=(null) inode=1827 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=16 name=(null) inode=1819 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=17 name=(null) inode=1828 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=18 name=(null) inode=1828 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=19 name=(null) inode=1829 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=20 name=(null) inode=1828 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=21 name=(null) inode=1830 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=22 name=(null) inode=1828 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=23 name=(null) inode=1831 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=24 name=(null) inode=1828 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=25 name=(null) inode=1832 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=26 name=(null) inode=1828 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=27 name=(null) inode=1833 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=28 name=(null) inode=1819 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=29 name=(null) inode=1834 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=30 name=(null) inode=1834 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=31 name=(null) inode=1835 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=32 name=(null) inode=1834 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=33 name=(null) inode=1836 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=34 name=(null) inode=1834 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=35 name=(null) inode=1837 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=36 name=(null) inode=1834 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=37 name=(null) inode=1838 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=38 name=(null) inode=1834 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=39 name=(null) inode=1839 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=40 name=(null) inode=1819 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=41 name=(null) inode=1840 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=42 name=(null) inode=1840 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=43 name=(null) inode=1841 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=44 name=(null) inode=1840 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=45 name=(null) inode=1842 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=46 name=(null) inode=1840 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=47 name=(null) inode=1843 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=48 name=(null) inode=1840 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=49 name=(null) inode=1844 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=50 name=(null) inode=1840 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=51 name=(null) inode=1845 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=52 name=(null) inode=44 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=53 name=(null) inode=1846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=54 name=(null) inode=1846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=55 name=(null) inode=1847 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=56 name=(null) inode=1846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=57 name=(null) inode=1848 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=58 name=(null) inode=1846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=59 name=(null) inode=1849 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=60 name=(null) inode=1849 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=61 name=(null) inode=1850 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=62 name=(null) inode=1849 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=63 name=(null) inode=1851 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=64 name=(null) inode=1849 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=65 name=(null) inode=1852 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=66 name=(null) inode=1849 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=67 name=(null) inode=1853 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=68 name=(null) inode=1849 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=69 name=(null) inode=1854 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=70 name=(null) inode=1846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=71 name=(null) inode=1855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=72 name=(null) inode=1855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=73 name=(null) inode=1856 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=74 name=(null) inode=1855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=75 name=(null) inode=1857 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=76 name=(null) inode=1855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=77 name=(null) inode=1858 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=78 name=(null) inode=1855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=79 name=(null) inode=1859 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=80 name=(null) inode=1855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=81 name=(null) inode=1860 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=82 name=(null) inode=1846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=83 name=(null) inode=1861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=84 name=(null) inode=1861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=85 name=(null) inode=1862 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=86 name=(null) inode=1861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=87 name=(null) inode=1863 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=88 name=(null) inode=1861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=89 name=(null) inode=1864 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=90 name=(null) inode=1861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=91 name=(null) inode=1865 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=92 name=(null) inode=1861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=93 name=(null) inode=1866 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=94 name=(null) inode=1846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=95 name=(null) inode=1867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=96 name=(null) inode=1867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=97 name=(null) inode=1868 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=98 name=(null) inode=1867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=99 name=(null) inode=1869 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=100 name=(null) inode=1867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=101 name=(null) inode=1870 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=102 name=(null) inode=1867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=103 name=(null) inode=1871 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=104 name=(null) inode=1867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PATH item=105 name=(null) inode=1872 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:24:57.998000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:24:58.021945 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Oct 2 19:24:58.024924 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Oct 2 19:24:58.031013 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:24:58.055940 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:24:58.056006 systemd-networkd[1007]: lo: Link UP Oct 2 19:24:58.056019 systemd-networkd[1007]: lo: Gained carrier Oct 2 19:24:58.056489 systemd-networkd[1007]: Enumeration completed Oct 2 19:24:58.056623 systemd-networkd[1007]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:24:58.056628 systemd[1]: Started systemd-networkd.service. Oct 2 19:24:58.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.058847 systemd-networkd[1007]: eth0: Link UP Oct 2 19:24:58.058860 systemd-networkd[1007]: eth0: Gained carrier Oct 2 19:24:58.111037 systemd-networkd[1007]: eth0: DHCPv4 address 10.0.0.8/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:24:58.119937 kernel: kvm: Nested Virtualization enabled Oct 2 19:24:58.120077 kernel: SVM: kvm: Nested Paging enabled Oct 2 19:24:58.132926 kernel: EDAC MC: Ver: 3.0.0 Oct 2 19:24:58.154761 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:24:58.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.156898 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:24:58.170257 lvm[1030]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:24:58.198751 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:24:58.198000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.199589 systemd[1]: Reached target cryptsetup.target. Oct 2 19:24:58.201454 systemd[1]: Starting lvm2-activation.service... Oct 2 19:24:58.204971 lvm[1031]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:24:58.231875 systemd[1]: Finished lvm2-activation.service. Oct 2 19:24:58.231000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.232707 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:24:58.233306 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:24:58.233349 systemd[1]: Reached target local-fs.target. Oct 2 19:24:58.233932 systemd[1]: Reached target machines.target. Oct 2 19:24:58.235903 systemd[1]: Starting ldconfig.service... Oct 2 19:24:58.236729 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:24:58.236797 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:24:58.237933 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:24:58.239803 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:24:58.241686 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:24:58.242772 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:24:58.242824 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:24:58.243861 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:24:58.244774 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1033 (bootctl) Oct 2 19:24:58.245958 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:24:58.252384 systemd-tmpfiles[1036]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:24:58.252929 systemd-tmpfiles[1036]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:24:58.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.253295 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:24:58.254140 systemd-tmpfiles[1036]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:24:58.284859 systemd-fsck[1041]: fsck.fat 4.2 (2021-01-31) Oct 2 19:24:58.284859 systemd-fsck[1041]: /dev/vda1: 789 files, 115069/258078 clusters Oct 2 19:24:58.286426 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:24:58.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.441906 systemd[1]: Mounting boot.mount... Oct 2 19:24:58.523880 systemd[1]: Mounted boot.mount. Oct 2 19:24:58.535936 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:24:58.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.709112 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:24:58.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.711073 systemd[1]: Starting audit-rules.service... Oct 2 19:24:58.713479 kernel: kauditd_printk_skb: 214 callbacks suppressed Oct 2 19:24:58.713567 kernel: audit: type=1130 audit(1696274698.709:149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.714860 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:24:58.716331 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:24:58.718000 audit: BPF prog-id=24 op=LOAD Oct 2 19:24:58.723114 kernel: audit: type=1334 audit(1696274698.718:150): prog-id=24 op=LOAD Oct 2 19:24:58.723214 kernel: audit: type=1334 audit(1696274698.721:151): prog-id=25 op=LOAD Oct 2 19:24:58.721000 audit: BPF prog-id=25 op=LOAD Oct 2 19:24:58.719846 systemd[1]: Starting systemd-resolved.service... Oct 2 19:24:58.722939 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:24:58.724889 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:24:58.726452 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:24:58.727041 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:24:58.728058 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:24:58.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.730949 kernel: audit: type=1130 audit(1696274698.726:152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.735393 kernel: audit: type=1130 audit(1696274698.730:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.735436 kernel: audit: type=1127 audit(1696274698.730:154): pid=1057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.730000 audit[1057]: SYSTEM_BOOT pid=1057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.731348 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:24:58.734963 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:24:58.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.738939 kernel: audit: type=1130 audit(1696274698.735:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.748330 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:24:58.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.750002 augenrules[1067]: No rules Oct 2 19:24:58.748000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:24:58.752391 kernel: audit: type=1130 audit(1696274698.748:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.752416 kernel: audit: type=1305 audit(1696274698.748:157): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:24:58.752431 kernel: audit: type=1300 audit(1696274698.748:157): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe4eb56780 a2=420 a3=0 items=0 ppid=1046 pid=1067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:58.748000 audit[1067]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe4eb56780 a2=420 a3=0 items=0 ppid=1046 pid=1067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:58.755855 systemd[1]: Finished audit-rules.service. Oct 2 19:24:58.748000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:24:58.787763 systemd-resolved[1052]: Positive Trust Anchors: Oct 2 19:24:58.787776 systemd-resolved[1052]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:24:58.787802 systemd-resolved[1052]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:24:58.791047 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:24:58.791806 systemd[1]: Reached target time-set.target. Oct 2 19:24:59.749777 systemd-timesyncd[1056]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:24:59.749808 systemd-timesyncd[1056]: Initial clock synchronization to Mon 2023-10-02 19:24:59.749721 UTC. Oct 2 19:24:59.760069 systemd-resolved[1052]: Defaulting to hostname 'linux'. Oct 2 19:24:59.761350 systemd[1]: Started systemd-resolved.service. Oct 2 19:24:59.761933 systemd[1]: Reached target network.target. Oct 2 19:24:59.762497 systemd[1]: Reached target nss-lookup.target. Oct 2 19:24:59.777254 ldconfig[1032]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:24:59.782410 systemd[1]: Finished ldconfig.service. Oct 2 19:24:59.783947 systemd[1]: Starting systemd-update-done.service... Oct 2 19:24:59.788997 systemd[1]: Finished systemd-update-done.service. Oct 2 19:24:59.789631 systemd[1]: Reached target sysinit.target. Oct 2 19:24:59.790210 systemd[1]: Started motdgen.path. Oct 2 19:24:59.790716 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:24:59.791506 systemd[1]: Started logrotate.timer. Oct 2 19:24:59.792092 systemd[1]: Started mdadm.timer. Oct 2 19:24:59.792562 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:24:59.793112 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:24:59.793141 systemd[1]: Reached target paths.target. Oct 2 19:24:59.793655 systemd[1]: Reached target timers.target. Oct 2 19:24:59.794350 systemd[1]: Listening on dbus.socket. Oct 2 19:24:59.795741 systemd[1]: Starting docker.socket... Oct 2 19:24:59.797860 systemd[1]: Listening on sshd.socket. Oct 2 19:24:59.798505 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:24:59.798980 systemd[1]: Listening on docker.socket. Oct 2 19:24:59.799497 systemd[1]: Reached target sockets.target. Oct 2 19:24:59.799984 systemd[1]: Reached target basic.target. Oct 2 19:24:59.800471 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:24:59.800492 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:24:59.801412 systemd[1]: Starting containerd.service... Oct 2 19:24:59.802723 systemd[1]: Starting dbus.service... Oct 2 19:24:59.803885 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:24:59.805616 systemd[1]: Starting extend-filesystems.service... Oct 2 19:24:59.806225 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:24:59.807136 systemd[1]: Starting motdgen.service... Oct 2 19:24:59.808332 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:24:59.809713 systemd[1]: Starting prepare-critools.service... Oct 2 19:24:59.811226 jq[1078]: false Oct 2 19:24:59.811218 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:24:59.812531 systemd[1]: Starting sshd-keygen.service... Oct 2 19:24:59.815051 systemd[1]: Starting systemd-logind.service... Oct 2 19:24:59.815523 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:24:59.815566 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:24:59.815869 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:24:59.816353 systemd[1]: Starting update-engine.service... Oct 2 19:24:59.817649 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:24:59.819443 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:24:59.819603 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:24:59.821165 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:24:59.821315 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:24:59.830035 tar[1095]: ./ Oct 2 19:24:59.830035 tar[1095]: ./loopback Oct 2 19:24:59.830539 jq[1093]: true Oct 2 19:24:59.832442 tar[1097]: crictl Oct 2 19:24:59.837123 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:24:59.837264 systemd[1]: Finished motdgen.service. Oct 2 19:24:59.837635 dbus-daemon[1077]: [system] SELinux support is enabled Oct 2 19:24:59.837910 systemd[1]: Started dbus.service. Oct 2 19:24:59.839890 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:24:59.839914 systemd[1]: Reached target system-config.target. Oct 2 19:24:59.840489 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:24:59.840506 systemd[1]: Reached target user-config.target. Oct 2 19:24:59.841258 jq[1105]: true Oct 2 19:24:59.848355 extend-filesystems[1079]: Found sr0 Oct 2 19:24:59.849307 extend-filesystems[1079]: Found vda Oct 2 19:24:59.849307 extend-filesystems[1079]: Found vda1 Oct 2 19:24:59.849307 extend-filesystems[1079]: Found vda2 Oct 2 19:24:59.849307 extend-filesystems[1079]: Found vda3 Oct 2 19:24:59.849307 extend-filesystems[1079]: Found usr Oct 2 19:24:59.849307 extend-filesystems[1079]: Found vda4 Oct 2 19:24:59.849307 extend-filesystems[1079]: Found vda6 Oct 2 19:24:59.849307 extend-filesystems[1079]: Found vda7 Oct 2 19:24:59.849307 extend-filesystems[1079]: Found vda9 Oct 2 19:24:59.849307 extend-filesystems[1079]: Checking size of /dev/vda9 Oct 2 19:24:59.869679 extend-filesystems[1079]: Old size kept for /dev/vda9 Oct 2 19:24:59.870888 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:24:59.871047 systemd[1]: Finished extend-filesystems.service. Oct 2 19:24:59.876628 systemd[1]: Created slice system-sshd.slice. Oct 2 19:24:59.884106 update_engine[1090]: I1002 19:24:59.883489 1090 main.cc:92] Flatcar Update Engine starting Oct 2 19:24:59.886509 systemd[1]: Started update-engine.service. Oct 2 19:24:59.889361 update_engine[1090]: I1002 19:24:59.886538 1090 update_check_scheduler.cc:74] Next update check in 4m41s Oct 2 19:24:59.888605 systemd[1]: Started locksmithd.service. Oct 2 19:24:59.891292 env[1104]: time="2023-10-02T19:24:59.891248822Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:24:59.893516 systemd-logind[1089]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:24:59.893536 systemd-logind[1089]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:24:59.894792 systemd-logind[1089]: New seat seat0. Oct 2 19:24:59.896207 bash[1131]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:24:59.896583 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:24:59.898781 tar[1095]: ./bandwidth Oct 2 19:24:59.897977 systemd[1]: Started systemd-logind.service. Oct 2 19:24:59.916868 env[1104]: time="2023-10-02T19:24:59.916794850Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:24:59.916964 env[1104]: time="2023-10-02T19:24:59.916924323Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:24:59.918570 env[1104]: time="2023-10-02T19:24:59.918513133Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:24:59.918613 env[1104]: time="2023-10-02T19:24:59.918552376Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:24:59.918795 env[1104]: time="2023-10-02T19:24:59.918768962Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:24:59.918795 env[1104]: time="2023-10-02T19:24:59.918789932Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:24:59.918865 env[1104]: time="2023-10-02T19:24:59.918801133Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:24:59.918865 env[1104]: time="2023-10-02T19:24:59.918809378Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:24:59.918902 env[1104]: time="2023-10-02T19:24:59.918866115Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:24:59.919092 env[1104]: time="2023-10-02T19:24:59.919068404Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:24:59.919189 env[1104]: time="2023-10-02T19:24:59.919163122Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:24:59.919189 env[1104]: time="2023-10-02T19:24:59.919181386Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:24:59.919253 env[1104]: time="2023-10-02T19:24:59.919217844Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:24:59.919253 env[1104]: time="2023-10-02T19:24:59.919228133Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:24:59.924090 env[1104]: time="2023-10-02T19:24:59.924057500Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:24:59.924143 env[1104]: time="2023-10-02T19:24:59.924091294Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:24:59.924143 env[1104]: time="2023-10-02T19:24:59.924103116Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:24:59.924143 env[1104]: time="2023-10-02T19:24:59.924125698Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:24:59.924143 env[1104]: time="2023-10-02T19:24:59.924137009Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:24:59.924216 env[1104]: time="2023-10-02T19:24:59.924148321Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:24:59.924216 env[1104]: time="2023-10-02T19:24:59.924159291Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:24:59.924216 env[1104]: time="2023-10-02T19:24:59.924170873Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:24:59.924216 env[1104]: time="2023-10-02T19:24:59.924184649Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:24:59.924216 env[1104]: time="2023-10-02T19:24:59.924195589Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:24:59.924216 env[1104]: time="2023-10-02T19:24:59.924206329Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:24:59.924216 env[1104]: time="2023-10-02T19:24:59.924217049Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:24:59.924344 env[1104]: time="2023-10-02T19:24:59.924286410Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:24:59.924366 env[1104]: time="2023-10-02T19:24:59.924343557Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:24:59.924578 env[1104]: time="2023-10-02T19:24:59.924528283Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:24:59.924578 env[1104]: time="2023-10-02T19:24:59.924565192Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.924578 env[1104]: time="2023-10-02T19:24:59.924576263Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:24:59.924654 env[1104]: time="2023-10-02T19:24:59.924612120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.924654 env[1104]: time="2023-10-02T19:24:59.924623071Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.924654 env[1104]: time="2023-10-02T19:24:59.924633380Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.924654 env[1104]: time="2023-10-02T19:24:59.924642888Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.924654 env[1104]: time="2023-10-02T19:24:59.924653087Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.924754 env[1104]: time="2023-10-02T19:24:59.924664398Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.924754 env[1104]: time="2023-10-02T19:24:59.924675028Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.924754 env[1104]: time="2023-10-02T19:24:59.924684346Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.924754 env[1104]: time="2023-10-02T19:24:59.924694936Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:24:59.924833 env[1104]: time="2023-10-02T19:24:59.924778282Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.924833 env[1104]: time="2023-10-02T19:24:59.924790645Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.924833 env[1104]: time="2023-10-02T19:24:59.924800273Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.924833 env[1104]: time="2023-10-02T19:24:59.924809470Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:24:59.924833 env[1104]: time="2023-10-02T19:24:59.924820641Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:24:59.924833 env[1104]: time="2023-10-02T19:24:59.924829328Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:24:59.924945 env[1104]: time="2023-10-02T19:24:59.924844656Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:24:59.924945 env[1104]: time="2023-10-02T19:24:59.924874152Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:24:59.925086 env[1104]: time="2023-10-02T19:24:59.925035685Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:24:59.925086 env[1104]: time="2023-10-02T19:24:59.925083625Z" level=info msg="Connect containerd service" Oct 2 19:24:59.926640 env[1104]: time="2023-10-02T19:24:59.925111106Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:24:59.926640 env[1104]: time="2023-10-02T19:24:59.925491009Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:24:59.926640 env[1104]: time="2023-10-02T19:24:59.925666267Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:24:59.926640 env[1104]: time="2023-10-02T19:24:59.925691955Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:24:59.926640 env[1104]: time="2023-10-02T19:24:59.925724537Z" level=info msg="containerd successfully booted in 0.035329s" Oct 2 19:24:59.925771 systemd[1]: Started containerd.service. Oct 2 19:24:59.928664 env[1104]: time="2023-10-02T19:24:59.928627891Z" level=info msg="Start subscribing containerd event" Oct 2 19:24:59.929917 tar[1095]: ./ptp Oct 2 19:24:59.932780 env[1104]: time="2023-10-02T19:24:59.932755332Z" level=info msg="Start recovering state" Oct 2 19:24:59.932829 env[1104]: time="2023-10-02T19:24:59.932818150Z" level=info msg="Start event monitor" Oct 2 19:24:59.932852 env[1104]: time="2023-10-02T19:24:59.932828759Z" level=info msg="Start snapshots syncer" Oct 2 19:24:59.932852 env[1104]: time="2023-10-02T19:24:59.932840281Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:24:59.932852 env[1104]: time="2023-10-02T19:24:59.932847244Z" level=info msg="Start streaming server" Oct 2 19:24:59.964513 tar[1095]: ./vlan Oct 2 19:24:59.997672 tar[1095]: ./host-device Oct 2 19:24:59.999944 locksmithd[1132]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:25:00.029608 tar[1095]: ./tuning Oct 2 19:25:00.058211 tar[1095]: ./vrf Oct 2 19:25:00.087905 tar[1095]: ./sbr Oct 2 19:25:00.117191 tar[1095]: ./tap Oct 2 19:25:00.154218 tar[1095]: ./dhcp Oct 2 19:25:00.175686 systemd-networkd[1007]: eth0: Gained IPv6LL Oct 2 19:25:00.241344 tar[1095]: ./static Oct 2 19:25:00.245658 sshd_keygen[1101]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:25:00.265444 tar[1095]: ./firewall Oct 2 19:25:00.266479 systemd[1]: Finished sshd-keygen.service. Oct 2 19:25:00.268711 systemd[1]: Starting issuegen.service... Oct 2 19:25:00.270392 systemd[1]: Started sshd@0-10.0.0.8:22-10.0.0.1:36410.service. Oct 2 19:25:00.271648 systemd[1]: Finished prepare-critools.service. Oct 2 19:25:00.273186 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:25:00.273300 systemd[1]: Finished issuegen.service. Oct 2 19:25:00.274948 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:25:00.280051 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:25:00.281877 systemd[1]: Started getty@tty1.service. Oct 2 19:25:00.283381 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:25:00.284141 systemd[1]: Reached target getty.target. Oct 2 19:25:00.300343 tar[1095]: ./macvlan Oct 2 19:25:00.318518 sshd[1152]: Accepted publickey for core from 10.0.0.1 port 36410 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:00.319868 sshd[1152]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:00.327108 systemd[1]: Created slice user-500.slice. Oct 2 19:25:00.328692 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:25:00.330409 tar[1095]: ./dummy Oct 2 19:25:00.331385 systemd-logind[1089]: New session 1 of user core. Oct 2 19:25:00.335328 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:25:00.336986 systemd[1]: Starting user@500.service... Oct 2 19:25:00.339575 (systemd)[1160]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:00.361381 tar[1095]: ./bridge Oct 2 19:25:00.395090 tar[1095]: ./ipvlan Oct 2 19:25:00.410168 systemd[1160]: Queued start job for default target default.target. Oct 2 19:25:00.410666 systemd[1160]: Reached target paths.target. Oct 2 19:25:00.410687 systemd[1160]: Reached target sockets.target. Oct 2 19:25:00.410698 systemd[1160]: Reached target timers.target. Oct 2 19:25:00.410709 systemd[1160]: Reached target basic.target. Oct 2 19:25:00.410801 systemd[1]: Started user@500.service. Oct 2 19:25:00.412156 systemd[1]: Started session-1.scope. Oct 2 19:25:00.412678 systemd[1160]: Reached target default.target. Oct 2 19:25:00.412758 systemd[1160]: Startup finished in 68ms. Oct 2 19:25:00.426305 tar[1095]: ./portmap Oct 2 19:25:00.453921 tar[1095]: ./host-local Oct 2 19:25:00.465695 systemd[1]: Started sshd@1-10.0.0.8:22-10.0.0.1:36414.service. Oct 2 19:25:00.491706 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:25:00.493427 systemd[1]: Reached target multi-user.target. Oct 2 19:25:00.495464 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:25:00.502660 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:25:00.502792 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:25:00.503820 systemd[1]: Startup finished in 505ms (kernel) + 7.157s (initrd) + 5.722s (userspace) = 13.385s. Oct 2 19:25:00.504691 sshd[1169]: Accepted publickey for core from 10.0.0.1 port 36414 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:00.506203 sshd[1169]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:00.509750 systemd-logind[1089]: New session 2 of user core. Oct 2 19:25:00.510575 systemd[1]: Started session-2.scope. Oct 2 19:25:00.565267 sshd[1169]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:00.567878 systemd[1]: sshd@1-10.0.0.8:22-10.0.0.1:36414.service: Deactivated successfully. Oct 2 19:25:00.568384 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:25:00.568823 systemd-logind[1089]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:25:00.569660 systemd[1]: Started sshd@2-10.0.0.8:22-10.0.0.1:36428.service. Oct 2 19:25:00.570190 systemd-logind[1089]: Removed session 2. Oct 2 19:25:00.604573 sshd[1178]: Accepted publickey for core from 10.0.0.1 port 36428 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:00.605419 sshd[1178]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:00.608280 systemd-logind[1089]: New session 3 of user core. Oct 2 19:25:00.609006 systemd[1]: Started session-3.scope. Oct 2 19:25:00.656828 sshd[1178]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:00.659549 systemd[1]: Started sshd@3-10.0.0.8:22-10.0.0.1:36434.service. Oct 2 19:25:00.659969 systemd[1]: sshd@2-10.0.0.8:22-10.0.0.1:36428.service: Deactivated successfully. Oct 2 19:25:00.660413 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:25:00.660804 systemd-logind[1089]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:25:00.661463 systemd-logind[1089]: Removed session 3. Oct 2 19:25:00.694466 sshd[1183]: Accepted publickey for core from 10.0.0.1 port 36434 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:00.695514 sshd[1183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:00.698566 systemd-logind[1089]: New session 4 of user core. Oct 2 19:25:00.699389 systemd[1]: Started session-4.scope. Oct 2 19:25:00.751293 sshd[1183]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:00.753990 systemd[1]: sshd@3-10.0.0.8:22-10.0.0.1:36434.service: Deactivated successfully. Oct 2 19:25:00.754526 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:25:00.755014 systemd-logind[1089]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:25:00.756165 systemd[1]: Started sshd@4-10.0.0.8:22-10.0.0.1:36436.service. Oct 2 19:25:00.756879 systemd-logind[1089]: Removed session 4. Oct 2 19:25:00.791257 sshd[1190]: Accepted publickey for core from 10.0.0.1 port 36436 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:00.792298 sshd[1190]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:00.796007 systemd-logind[1089]: New session 5 of user core. Oct 2 19:25:00.797022 systemd[1]: Started session-5.scope. Oct 2 19:25:00.855168 sudo[1193]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:25:00.855384 sudo[1193]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:25:00.865754 dbus-daemon[1077]: \xd0\u000d`\xa52V: received setenforce notice (enforcing=216859168) Oct 2 19:25:00.867721 sudo[1193]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:00.869500 sshd[1190]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:00.872202 systemd[1]: sshd@4-10.0.0.8:22-10.0.0.1:36436.service: Deactivated successfully. Oct 2 19:25:00.872702 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:25:00.873163 systemd-logind[1089]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:25:00.874044 systemd[1]: Started sshd@5-10.0.0.8:22-10.0.0.1:36446.service. Oct 2 19:25:00.874584 systemd-logind[1089]: Removed session 5. Oct 2 19:25:00.909467 sshd[1197]: Accepted publickey for core from 10.0.0.1 port 36446 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:00.910239 sshd[1197]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:00.913027 systemd-logind[1089]: New session 6 of user core. Oct 2 19:25:00.913766 systemd[1]: Started session-6.scope. Oct 2 19:25:00.964739 sudo[1201]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:25:00.964897 sudo[1201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:25:00.967256 sudo[1201]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:00.971032 sudo[1200]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:25:00.971194 sudo[1200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:25:00.978471 systemd[1]: Stopping audit-rules.service... Oct 2 19:25:00.977000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:25:00.977000 audit[1204]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcfdabbf30 a2=420 a3=0 items=0 ppid=1 pid=1204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:00.977000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:25:00.979592 auditctl[1204]: No rules Oct 2 19:25:00.979767 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:25:00.979893 systemd[1]: Stopped audit-rules.service. Oct 2 19:25:00.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.981028 systemd[1]: Starting audit-rules.service... Oct 2 19:25:00.994490 augenrules[1221]: No rules Oct 2 19:25:00.995245 systemd[1]: Finished audit-rules.service. Oct 2 19:25:00.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.996241 sudo[1200]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:00.994000 audit[1200]: USER_END pid=1200 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.994000 audit[1200]: CRED_DISP pid=1200 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.997637 sshd[1197]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:00.996000 audit[1197]: USER_END pid=1197 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:00.997000 audit[1197]: CRED_DISP pid=1197 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:00.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.8:22-10.0.0.1:36446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:00.999979 systemd[1]: sshd@5-10.0.0.8:22-10.0.0.1:36446.service: Deactivated successfully. Oct 2 19:25:01.000434 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:25:01.001122 systemd-logind[1089]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:25:01.001889 systemd[1]: Started sshd@6-10.0.0.8:22-10.0.0.1:36460.service. Oct 2 19:25:01.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.8:22-10.0.0.1:36460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.002606 systemd-logind[1089]: Removed session 6. Oct 2 19:25:01.037000 audit[1227]: USER_ACCT pid=1227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:01.039682 sshd[1227]: Accepted publickey for core from 10.0.0.1 port 36460 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:01.039000 audit[1227]: CRED_ACQ pid=1227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:01.039000 audit[1227]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce5cc6ab0 a2=3 a3=0 items=0 ppid=1 pid=1227 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:01.039000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:01.041077 sshd[1227]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:01.044626 systemd-logind[1089]: New session 7 of user core. Oct 2 19:25:01.045262 systemd[1]: Started session-7.scope. Oct 2 19:25:01.047000 audit[1227]: USER_START pid=1227 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:01.048000 audit[1229]: CRED_ACQ pid=1229 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:01.096000 audit[1230]: USER_ACCT pid=1230 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.097000 audit[1230]: CRED_REFR pid=1230 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.098573 sudo[1230]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:25:01.098790 sudo[1230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:25:01.098000 audit[1230]: USER_START pid=1230 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.633043 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:25:01.637982 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:25:01.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.638275 systemd[1]: Reached target network-online.target. Oct 2 19:25:01.639522 systemd[1]: Starting docker.service... Oct 2 19:25:01.667038 env[1247]: time="2023-10-02T19:25:01.666980653Z" level=info msg="Starting up" Oct 2 19:25:01.668269 env[1247]: time="2023-10-02T19:25:01.668233042Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:25:01.668269 env[1247]: time="2023-10-02T19:25:01.668257648Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:25:01.668344 env[1247]: time="2023-10-02T19:25:01.668289969Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:25:01.668344 env[1247]: time="2023-10-02T19:25:01.668300328Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:25:01.669766 env[1247]: time="2023-10-02T19:25:01.669746049Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:25:01.669766 env[1247]: time="2023-10-02T19:25:01.669760376Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:25:01.669845 env[1247]: time="2023-10-02T19:25:01.669771317Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:25:01.669845 env[1247]: time="2023-10-02T19:25:01.669778671Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:25:01.673666 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport464153264-merged.mount: Deactivated successfully. Oct 2 19:25:02.170572 env[1247]: time="2023-10-02T19:25:02.170522825Z" level=info msg="Loading containers: start." Oct 2 19:25:02.207000 audit[1281]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.207000 audit[1281]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc3fac4b60 a2=0 a3=7ffc3fac4b4c items=0 ppid=1247 pid=1281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.207000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:25:02.208000 audit[1283]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1283 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.208000 audit[1283]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc1c3c7a20 a2=0 a3=7ffc1c3c7a0c items=0 ppid=1247 pid=1283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.208000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:25:02.209000 audit[1285]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.209000 audit[1285]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd71849400 a2=0 a3=7ffd718493ec items=0 ppid=1247 pid=1285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.209000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:25:02.211000 audit[1287]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.211000 audit[1287]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffeb7be48d0 a2=0 a3=7ffeb7be48bc items=0 ppid=1247 pid=1287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.211000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:25:02.212000 audit[1289]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.212000 audit[1289]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc936b2680 a2=0 a3=7ffc936b266c items=0 ppid=1247 pid=1289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.212000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:25:02.231000 audit[1294]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.231000 audit[1294]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc61419dc0 a2=0 a3=7ffc61419dac items=0 ppid=1247 pid=1294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.231000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:25:02.238000 audit[1296]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.238000 audit[1296]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff47ce8e10 a2=0 a3=7fff47ce8dfc items=0 ppid=1247 pid=1296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.238000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:25:02.240000 audit[1298]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.240000 audit[1298]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff9d354690 a2=0 a3=7fff9d35467c items=0 ppid=1247 pid=1298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.240000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:25:02.241000 audit[1300]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.241000 audit[1300]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd04170e10 a2=0 a3=7ffd04170dfc items=0 ppid=1247 pid=1300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.241000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:02.248000 audit[1304]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.248000 audit[1304]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcd5238550 a2=0 a3=7ffcd523853c items=0 ppid=1247 pid=1304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.248000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:02.248000 audit[1305]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1305 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.248000 audit[1305]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff50053490 a2=0 a3=7fff5005347c items=0 ppid=1247 pid=1305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.248000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:02.256576 kernel: Initializing XFRM netlink socket Oct 2 19:25:02.286090 env[1247]: time="2023-10-02T19:25:02.286052103Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:25:02.305000 audit[1312]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1312 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.305000 audit[1312]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffdeacb5370 a2=0 a3=7ffdeacb535c items=0 ppid=1247 pid=1312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.305000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:25:02.317000 audit[1315]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.317000 audit[1315]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff9a151ff0 a2=0 a3=7fff9a151fdc items=0 ppid=1247 pid=1315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.317000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:25:02.319000 audit[1318]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.319000 audit[1318]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffb4954a60 a2=0 a3=7fffb4954a4c items=0 ppid=1247 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.319000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:25:02.320000 audit[1320]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.320000 audit[1320]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd0fb034e0 a2=0 a3=7ffd0fb034cc items=0 ppid=1247 pid=1320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.320000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:25:02.322000 audit[1322]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.322000 audit[1322]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffdce2b0c20 a2=0 a3=7ffdce2b0c0c items=0 ppid=1247 pid=1322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.322000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:25:02.323000 audit[1324]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.323000 audit[1324]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffcfa9d8410 a2=0 a3=7ffcfa9d83fc items=0 ppid=1247 pid=1324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.323000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:25:02.325000 audit[1326]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.325000 audit[1326]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff83e1e8e0 a2=0 a3=7fff83e1e8cc items=0 ppid=1247 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.325000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:25:02.331000 audit[1329]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.331000 audit[1329]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff18738eb0 a2=0 a3=7fff18738e9c items=0 ppid=1247 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.331000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:25:02.332000 audit[1331]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.332000 audit[1331]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd097aa5f0 a2=0 a3=7ffd097aa5dc items=0 ppid=1247 pid=1331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.332000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:25:02.333000 audit[1333]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.333000 audit[1333]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffcab7eb300 a2=0 a3=7ffcab7eb2ec items=0 ppid=1247 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.333000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:25:02.335000 audit[1335]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1335 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.335000 audit[1335]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc4f2483b0 a2=0 a3=7ffc4f24839c items=0 ppid=1247 pid=1335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.335000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:25:02.337156 systemd-networkd[1007]: docker0: Link UP Oct 2 19:25:02.343000 audit[1339]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.343000 audit[1339]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd1c08cb10 a2=0 a3=7ffd1c08cafc items=0 ppid=1247 pid=1339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.343000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:02.344000 audit[1340]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:02.344000 audit[1340]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffb50d1e40 a2=0 a3=7fffb50d1e2c items=0 ppid=1247 pid=1340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:02.344000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:02.346136 env[1247]: time="2023-10-02T19:25:02.346107539Z" level=info msg="Loading containers: done." Oct 2 19:25:02.357989 env[1247]: time="2023-10-02T19:25:02.357947914Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:25:02.358114 env[1247]: time="2023-10-02T19:25:02.358088748Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:25:02.358179 env[1247]: time="2023-10-02T19:25:02.358161514Z" level=info msg="Daemon has completed initialization" Oct 2 19:25:02.372701 systemd[1]: Started docker.service. Oct 2 19:25:02.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.376115 env[1247]: time="2023-10-02T19:25:02.376068827Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:25:02.389649 systemd[1]: Reloading. Oct 2 19:25:02.448996 /usr/lib/systemd/system-generators/torcx-generator[1388]: time="2023-10-02T19:25:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:25:02.449020 /usr/lib/systemd/system-generators/torcx-generator[1388]: time="2023-10-02T19:25:02Z" level=info msg="torcx already run" Oct 2 19:25:02.503666 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:25:02.503683 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:25:02.523182 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit: BPF prog-id=31 op=LOAD Oct 2 19:25:02.574000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit: BPF prog-id=32 op=LOAD Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.574000 audit: BPF prog-id=33 op=LOAD Oct 2 19:25:02.574000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:25:02.574000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit: BPF prog-id=34 op=LOAD Oct 2 19:25:02.575000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit: BPF prog-id=35 op=LOAD Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.575000 audit: BPF prog-id=36 op=LOAD Oct 2 19:25:02.575000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:25:02.575000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:25:02.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit: BPF prog-id=37 op=LOAD Oct 2 19:25:02.577000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit: BPF prog-id=38 op=LOAD Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit: BPF prog-id=39 op=LOAD Oct 2 19:25:02.577000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:25:02.577000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.577000 audit: BPF prog-id=40 op=LOAD Oct 2 19:25:02.577000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:25:02.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.579000 audit: BPF prog-id=41 op=LOAD Oct 2 19:25:02.579000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit: BPF prog-id=42 op=LOAD Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.580000 audit: BPF prog-id=43 op=LOAD Oct 2 19:25:02.580000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:25:02.580000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:25:02.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.581000 audit: BPF prog-id=44 op=LOAD Oct 2 19:25:02.581000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:25:02.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:02.582000 audit: BPF prog-id=45 op=LOAD Oct 2 19:25:02.582000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:25:02.589160 systemd[1]: Started kubelet.service. Oct 2 19:25:02.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.631361 kubelet[1428]: E1002 19:25:02.631295 1428 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:25:02.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:02.633147 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:25:02.633249 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:25:02.938020 env[1104]: time="2023-10-02T19:25:02.937903858Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:25:03.541432 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2718412161.mount: Deactivated successfully. Oct 2 19:25:05.155800 env[1104]: time="2023-10-02T19:25:05.155741535Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:05.157852 env[1104]: time="2023-10-02T19:25:05.157813902Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:05.159615 env[1104]: time="2023-10-02T19:25:05.159594431Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:05.161201 env[1104]: time="2023-10-02T19:25:05.161179674Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:05.161830 env[1104]: time="2023-10-02T19:25:05.161783907Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c\"" Oct 2 19:25:05.172701 env[1104]: time="2023-10-02T19:25:05.172662498Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:25:08.583727 env[1104]: time="2023-10-02T19:25:08.583652812Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:08.587409 env[1104]: time="2023-10-02T19:25:08.587369012Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:08.589308 env[1104]: time="2023-10-02T19:25:08.589273173Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:08.593065 env[1104]: time="2023-10-02T19:25:08.593025510Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:08.593891 env[1104]: time="2023-10-02T19:25:08.593855687Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988\"" Oct 2 19:25:08.602056 env[1104]: time="2023-10-02T19:25:08.601999128Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:25:09.841313 env[1104]: time="2023-10-02T19:25:09.841266607Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:09.843342 env[1104]: time="2023-10-02T19:25:09.843315520Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:09.845045 env[1104]: time="2023-10-02T19:25:09.845025166Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:09.846714 env[1104]: time="2023-10-02T19:25:09.846695068Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:09.847328 env[1104]: time="2023-10-02T19:25:09.847300293Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d\"" Oct 2 19:25:09.854654 env[1104]: time="2023-10-02T19:25:09.854624278Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:25:10.939438 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2413260539.mount: Deactivated successfully. Oct 2 19:25:12.001172 env[1104]: time="2023-10-02T19:25:12.001120504Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:12.063047 env[1104]: time="2023-10-02T19:25:12.063012083Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:12.065201 env[1104]: time="2023-10-02T19:25:12.065136156Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:12.066647 env[1104]: time="2023-10-02T19:25:12.066597577Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:12.067104 env[1104]: time="2023-10-02T19:25:12.067070364Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985\"" Oct 2 19:25:12.076325 env[1104]: time="2023-10-02T19:25:12.076286838Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:25:12.607167 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount557163960.mount: Deactivated successfully. Oct 2 19:25:12.612732 env[1104]: time="2023-10-02T19:25:12.612695766Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:12.614454 env[1104]: time="2023-10-02T19:25:12.614422204Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:12.615869 env[1104]: time="2023-10-02T19:25:12.615823622Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:12.617044 env[1104]: time="2023-10-02T19:25:12.617017922Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:12.617470 env[1104]: time="2023-10-02T19:25:12.617440635Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:25:12.625817 env[1104]: time="2023-10-02T19:25:12.625788069Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:25:12.883897 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:25:12.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:12.884065 systemd[1]: Stopped kubelet.service. Oct 2 19:25:12.884657 kernel: kauditd_printk_skb: 270 callbacks suppressed Oct 2 19:25:12.884700 kernel: audit: type=1130 audit(1696274712.882:375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:12.885305 systemd[1]: Started kubelet.service. Oct 2 19:25:12.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:12.888734 kernel: audit: type=1131 audit(1696274712.882:376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:12.888791 kernel: audit: type=1130 audit(1696274712.883:377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:12.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:12.920009 kubelet[1485]: E1002 19:25:12.919954 1485 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:25:12.922430 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:25:12.922546 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:25:12.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:12.925580 kernel: audit: type=1131 audit(1696274712.921:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:13.329811 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount900080755.mount: Deactivated successfully. Oct 2 19:25:17.868864 env[1104]: time="2023-10-02T19:25:17.868797874Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:17.880617 env[1104]: time="2023-10-02T19:25:17.880582775Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:17.882579 env[1104]: time="2023-10-02T19:25:17.882518956Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:17.885413 env[1104]: time="2023-10-02T19:25:17.885365514Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:17.885919 env[1104]: time="2023-10-02T19:25:17.885883566Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Oct 2 19:25:17.894081 env[1104]: time="2023-10-02T19:25:17.894049600Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:25:19.403327 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1937080969.mount: Deactivated successfully. Oct 2 19:25:20.529902 env[1104]: time="2023-10-02T19:25:20.529842442Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:20.624408 env[1104]: time="2023-10-02T19:25:20.624374534Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:20.680190 env[1104]: time="2023-10-02T19:25:20.680161785Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:20.682621 env[1104]: time="2023-10-02T19:25:20.682591271Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:20.683056 env[1104]: time="2023-10-02T19:25:20.683015496Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:25:22.330008 systemd[1]: Stopped kubelet.service. Oct 2 19:25:22.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:22.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:22.334517 kernel: audit: type=1130 audit(1696274722.328:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:22.334577 kernel: audit: type=1131 audit(1696274722.328:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:22.343336 systemd[1]: Reloading. Oct 2 19:25:22.403188 /usr/lib/systemd/system-generators/torcx-generator[1593]: time="2023-10-02T19:25:22Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:25:22.403211 /usr/lib/systemd/system-generators/torcx-generator[1593]: time="2023-10-02T19:25:22Z" level=info msg="torcx already run" Oct 2 19:25:22.457183 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:25:22.457199 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:25:22.475144 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:25:22.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.531013 kernel: audit: type=1400 audit(1696274722.525:381): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.531060 kernel: audit: type=1400 audit(1696274722.525:382): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.531089 kernel: audit: type=1400 audit(1696274722.525:383): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.532903 kernel: audit: type=1400 audit(1696274722.525:384): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.537023 kernel: audit: type=1400 audit(1696274722.525:385): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.537069 kernel: audit: type=1400 audit(1696274722.525:386): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541002 kernel: audit: type=1400 audit(1696274722.525:387): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541044 kernel: audit: type=1400 audit(1696274722.525:388): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.529000 audit: BPF prog-id=46 op=LOAD Oct 2 19:25:22.529000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:25:22.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.533000 audit: BPF prog-id=47 op=LOAD Oct 2 19:25:22.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.537000 audit: BPF prog-id=48 op=LOAD Oct 2 19:25:22.537000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:25:22.537000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:25:22.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.539000 audit: BPF prog-id=49 op=LOAD Oct 2 19:25:22.539000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:25:22.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541000 audit: BPF prog-id=50 op=LOAD Oct 2 19:25:22.541000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.541000 audit: BPF prog-id=51 op=LOAD Oct 2 19:25:22.541000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:25:22.541000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit: BPF prog-id=52 op=LOAD Oct 2 19:25:22.543000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit: BPF prog-id=53 op=LOAD Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit: BPF prog-id=54 op=LOAD Oct 2 19:25:22.544000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:25:22.544000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.544000 audit: BPF prog-id=55 op=LOAD Oct 2 19:25:22.544000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:25:22.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit: BPF prog-id=56 op=LOAD Oct 2 19:25:22.547000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit: BPF prog-id=57 op=LOAD Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.547000 audit: BPF prog-id=58 op=LOAD Oct 2 19:25:22.547000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:25:22.547000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:25:22.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.548000 audit: BPF prog-id=59 op=LOAD Oct 2 19:25:22.548000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:25:22.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.550000 audit: BPF prog-id=60 op=LOAD Oct 2 19:25:22.550000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:25:22.560828 systemd[1]: Started kubelet.service. Oct 2 19:25:22.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:22.599068 kubelet[1635]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:25:22.599357 kubelet[1635]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:25:22.599478 kubelet[1635]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:25:22.599648 kubelet[1635]: I1002 19:25:22.599601 1635 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:25:22.888793 kubelet[1635]: I1002 19:25:22.888696 1635 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:25:22.888793 kubelet[1635]: I1002 19:25:22.888726 1635 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:25:22.888961 kubelet[1635]: I1002 19:25:22.888947 1635 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:25:22.891920 kubelet[1635]: I1002 19:25:22.891890 1635 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:25:22.894236 kubelet[1635]: E1002 19:25:22.894203 1635 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.8:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:22.896188 kubelet[1635]: I1002 19:25:22.896167 1635 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:25:22.896361 kubelet[1635]: I1002 19:25:22.896341 1635 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:25:22.896417 kubelet[1635]: I1002 19:25:22.896406 1635 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:25:22.896500 kubelet[1635]: I1002 19:25:22.896424 1635 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:25:22.896500 kubelet[1635]: I1002 19:25:22.896435 1635 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:25:22.896548 kubelet[1635]: I1002 19:25:22.896531 1635 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:25:22.899035 kubelet[1635]: I1002 19:25:22.899002 1635 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:25:22.899035 kubelet[1635]: I1002 19:25:22.899027 1635 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:25:22.899035 kubelet[1635]: I1002 19:25:22.899047 1635 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:25:22.899197 kubelet[1635]: I1002 19:25:22.899063 1635 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:25:22.899575 kubelet[1635]: I1002 19:25:22.899542 1635 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:25:22.899575 kubelet[1635]: W1002 19:25:22.899537 1635 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:22.899647 kubelet[1635]: E1002 19:25:22.899600 1635 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:22.899724 kubelet[1635]: W1002 19:25:22.899552 1635 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:22.899724 kubelet[1635]: E1002 19:25:22.899733 1635 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:22.899862 kubelet[1635]: W1002 19:25:22.899845 1635 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:25:22.900245 kubelet[1635]: I1002 19:25:22.900223 1635 server.go:1168] "Started kubelet" Oct 2 19:25:22.899000 audit[1635]: AVC avc: denied { mac_admin } for pid=1635 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.899000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:25:22.899000 audit[1635]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00083c210 a1=c0002695d8 a2=c00083c1e0 a3=25 items=0 ppid=1 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.899000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:25:22.899000 audit[1635]: AVC avc: denied { mac_admin } for pid=1635 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:22.899000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:25:22.899000 audit[1635]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00071f320 a1=c0002695f0 a2=c00083c2a0 a3=25 items=0 ppid=1 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.899000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:25:22.901799 kubelet[1635]: I1002 19:25:22.901464 1635 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:25:22.901799 kubelet[1635]: I1002 19:25:22.901498 1635 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:25:22.901799 kubelet[1635]: I1002 19:25:22.901543 1635 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:25:22.901868 kubelet[1635]: E1002 19:25:22.901715 1635 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a60df8bf0e3c3", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 25, 22, 900206531, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 25, 22, 900206531, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.8:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.8:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:25:22.902014 kubelet[1635]: I1002 19:25:22.901996 1635 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:25:22.902179 kubelet[1635]: I1002 19:25:22.902165 1635 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:25:22.902579 kubelet[1635]: W1002 19:25:22.902541 1635 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:22.902656 kubelet[1635]: E1002 19:25:22.902642 1635 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:22.902944 kubelet[1635]: E1002 19:25:22.902931 1635 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:25:22.903019 kubelet[1635]: E1002 19:25:22.903005 1635 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:25:22.903302 kubelet[1635]: E1002 19:25:22.903279 1635 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="200ms" Oct 2 19:25:22.903725 kubelet[1635]: I1002 19:25:22.903535 1635 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:25:22.903961 kubelet[1635]: I1002 19:25:22.903937 1635 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:25:22.904101 kubelet[1635]: I1002 19:25:22.904084 1635 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:25:22.903000 audit[1647]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:22.903000 audit[1647]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=4 a1=7ffc327ab6a0 a2=0 a3=7ffc327ab68c items=0 ppid=1635 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.903000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:25:22.904000 audit[1648]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:22.904000 audit[1648]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=4 a1=7ffd918f09d0 a2=0 a3=7ffd918f09bc items=0 ppid=1635 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.904000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:25:22.906000 audit[1650]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:22.906000 audit[1650]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=4 a1=7ffca96cc9c0 a2=0 a3=7ffca96cc9ac items=0 ppid=1635 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.906000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:25:22.907000 audit[1652]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1652 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:22.907000 audit[1652]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=4 a1=7ffc6e398990 a2=0 a3=7ffc6e39897c items=0 ppid=1635 pid=1652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.907000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:25:22.914000 audit[1657]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1657 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:22.914000 audit[1657]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=4 a1=7fff79d9da50 a2=0 a3=7fff79d9da3c items=0 ppid=1635 pid=1657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.914000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:25:22.916796 kubelet[1635]: I1002 19:25:22.916770 1635 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:25:22.915000 audit[1659]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1659 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:22.915000 audit[1659]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=4 a1=7ffdbdfb3ae0 a2=0 a3=7ffdbdfb3acc items=0 ppid=1635 pid=1659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.915000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:25:22.917483 kubelet[1635]: I1002 19:25:22.917467 1635 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:25:22.917513 kubelet[1635]: I1002 19:25:22.917485 1635 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:25:22.917513 kubelet[1635]: I1002 19:25:22.917502 1635 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:25:22.917569 kubelet[1635]: E1002 19:25:22.917545 1635 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:25:22.916000 audit[1660]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1660 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:22.916000 audit[1660]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=4 a1=7ffcf1029960 a2=0 a3=7ffcf102994c items=0 ppid=1635 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.916000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:25:22.918442 kubelet[1635]: W1002 19:25:22.918421 1635 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:22.916000 audit[1661]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1661 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:22.916000 audit[1661]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=4 a1=7ffc2219bbc0 a2=0 a3=7ffc2219bbac items=0 ppid=1635 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.916000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:25:22.918674 kubelet[1635]: E1002 19:25:22.918660 1635 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:22.917000 audit[1663]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1663 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:22.917000 audit[1663]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=4 a1=7ffff6b915d0 a2=0 a3=7ffff6b915bc items=0 ppid=1635 pid=1663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.917000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:25:22.917000 audit[1664]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1664 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:22.917000 audit[1664]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=4 a1=7fff837eee30 a2=0 a3=7fff837eee1c items=0 ppid=1635 pid=1664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.917000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:25:22.918000 audit[1666]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1666 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:22.918000 audit[1666]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=4 a1=7ffddaff4f80 a2=0 a3=7ffddaff4f6c items=0 ppid=1635 pid=1666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.918000 audit[1667]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1667 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:22.918000 audit[1667]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=4 a1=7fff1a39a630 a2=0 a3=7fff1a39a61c items=0 ppid=1635 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:22.918000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:25:22.920509 kubelet[1635]: I1002 19:25:22.920495 1635 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:25:22.920509 kubelet[1635]: I1002 19:25:22.920505 1635 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:25:22.920581 kubelet[1635]: I1002 19:25:22.920531 1635 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:25:22.918000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:25:23.002734 kubelet[1635]: I1002 19:25:23.002712 1635 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:23.003119 kubelet[1635]: E1002 19:25:23.003087 1635 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.8:6443/api/v1/nodes\": dial tcp 10.0.0.8:6443: connect: connection refused" node="localhost" Oct 2 19:25:23.018327 kubelet[1635]: E1002 19:25:23.018286 1635 kubelet.go:2281] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 19:25:23.018878 kubelet[1635]: I1002 19:25:23.018859 1635 policy_none.go:49] "None policy: Start" Oct 2 19:25:23.019455 kubelet[1635]: I1002 19:25:23.019428 1635 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:25:23.019455 kubelet[1635]: I1002 19:25:23.019458 1635 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:25:23.025269 systemd[1]: Created slice kubepods.slice. Oct 2 19:25:23.029045 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:25:23.031245 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:25:23.037039 kubelet[1635]: I1002 19:25:23.037005 1635 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:25:23.035000 audit[1635]: AVC avc: denied { mac_admin } for pid=1635 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:23.035000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:25:23.035000 audit[1635]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0011b8db0 a1=c0011c5080 a2=c0011b8d80 a3=25 items=0 ppid=1 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:23.035000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:25:23.037256 kubelet[1635]: I1002 19:25:23.037060 1635 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:25:23.037256 kubelet[1635]: I1002 19:25:23.037227 1635 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:25:23.037874 kubelet[1635]: E1002 19:25:23.037857 1635 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:25:23.104677 kubelet[1635]: E1002 19:25:23.104644 1635 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="400ms" Oct 2 19:25:23.205063 kubelet[1635]: I1002 19:25:23.204964 1635 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:23.205349 kubelet[1635]: E1002 19:25:23.205327 1635 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.8:6443/api/v1/nodes\": dial tcp 10.0.0.8:6443: connect: connection refused" node="localhost" Oct 2 19:25:23.219425 kubelet[1635]: I1002 19:25:23.219394 1635 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:25:23.220305 kubelet[1635]: I1002 19:25:23.220278 1635 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:25:23.220946 kubelet[1635]: I1002 19:25:23.220918 1635 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:25:23.224742 systemd[1]: Created slice kubepods-burstable-pod739aed54d4db37e334c820123f8ea719.slice. Oct 2 19:25:23.239627 systemd[1]: Created slice kubepods-burstable-pod80b8b8966aa7d1c422f3be2bfac9c13f.slice. Oct 2 19:25:23.242804 systemd[1]: Created slice kubepods-burstable-pod24fef87020af50fba838138f9686fc61.slice. Oct 2 19:25:23.304397 kubelet[1635]: I1002 19:25:23.304334 1635 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:23.304397 kubelet[1635]: I1002 19:25:23.304388 1635 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:23.304397 kubelet[1635]: I1002 19:25:23.304408 1635 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/739aed54d4db37e334c820123f8ea719-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"739aed54d4db37e334c820123f8ea719\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:23.304627 kubelet[1635]: I1002 19:25:23.304438 1635 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/739aed54d4db37e334c820123f8ea719-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"739aed54d4db37e334c820123f8ea719\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:23.304627 kubelet[1635]: I1002 19:25:23.304481 1635 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/739aed54d4db37e334c820123f8ea719-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"739aed54d4db37e334c820123f8ea719\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:23.304627 kubelet[1635]: I1002 19:25:23.304518 1635 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:23.304627 kubelet[1635]: I1002 19:25:23.304568 1635 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:23.304627 kubelet[1635]: I1002 19:25:23.304599 1635 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/24fef87020af50fba838138f9686fc61-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"24fef87020af50fba838138f9686fc61\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:25:23.304777 kubelet[1635]: I1002 19:25:23.304619 1635 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:23.505750 kubelet[1635]: E1002 19:25:23.505643 1635 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="800ms" Oct 2 19:25:23.537894 kubelet[1635]: E1002 19:25:23.537855 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:23.538587 env[1104]: time="2023-10-02T19:25:23.538539503Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:739aed54d4db37e334c820123f8ea719,Namespace:kube-system,Attempt:0,}" Oct 2 19:25:23.541738 kubelet[1635]: E1002 19:25:23.541704 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:23.542090 env[1104]: time="2023-10-02T19:25:23.542064093Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:80b8b8966aa7d1c422f3be2bfac9c13f,Namespace:kube-system,Attempt:0,}" Oct 2 19:25:23.544246 kubelet[1635]: E1002 19:25:23.544234 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:23.544491 env[1104]: time="2023-10-02T19:25:23.544464224Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:24fef87020af50fba838138f9686fc61,Namespace:kube-system,Attempt:0,}" Oct 2 19:25:23.606649 kubelet[1635]: I1002 19:25:23.606613 1635 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:23.606970 kubelet[1635]: E1002 19:25:23.606927 1635 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.8:6443/api/v1/nodes\": dial tcp 10.0.0.8:6443: connect: connection refused" node="localhost" Oct 2 19:25:23.964414 kubelet[1635]: W1002 19:25:23.964295 1635 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:23.964414 kubelet[1635]: E1002 19:25:23.964355 1635 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:24.258209 kubelet[1635]: W1002 19:25:24.258092 1635 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:24.258209 kubelet[1635]: E1002 19:25:24.258154 1635 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:24.306576 kubelet[1635]: E1002 19:25:24.306492 1635 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="1.6s" Oct 2 19:25:24.360175 kubelet[1635]: W1002 19:25:24.360103 1635 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:24.360175 kubelet[1635]: E1002 19:25:24.360161 1635 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:24.383548 kubelet[1635]: W1002 19:25:24.383512 1635 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:24.383548 kubelet[1635]: E1002 19:25:24.383544 1635 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:24.408076 kubelet[1635]: I1002 19:25:24.408052 1635 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:24.408247 kubelet[1635]: E1002 19:25:24.408233 1635 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.8:6443/api/v1/nodes\": dial tcp 10.0.0.8:6443: connect: connection refused" node="localhost" Oct 2 19:25:24.996569 kubelet[1635]: E1002 19:25:24.996526 1635 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.8:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:25.633858 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1081489220.mount: Deactivated successfully. Oct 2 19:25:25.640134 env[1104]: time="2023-10-02T19:25:25.640083118Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:25.641116 env[1104]: time="2023-10-02T19:25:25.641070439Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:25.643634 env[1104]: time="2023-10-02T19:25:25.643599121Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:25.645349 env[1104]: time="2023-10-02T19:25:25.645318366Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:25.646531 env[1104]: time="2023-10-02T19:25:25.646503578Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:25.647665 env[1104]: time="2023-10-02T19:25:25.647636553Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:25.648738 env[1104]: time="2023-10-02T19:25:25.648713433Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:25.649942 env[1104]: time="2023-10-02T19:25:25.649907973Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:25.651080 env[1104]: time="2023-10-02T19:25:25.651056667Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:25.652825 env[1104]: time="2023-10-02T19:25:25.652798964Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:25.653918 env[1104]: time="2023-10-02T19:25:25.653891964Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:25.655222 env[1104]: time="2023-10-02T19:25:25.655191882Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:25.670527 env[1104]: time="2023-10-02T19:25:25.670461728Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:25.670527 env[1104]: time="2023-10-02T19:25:25.670497395Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:25.670527 env[1104]: time="2023-10-02T19:25:25.670507544Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:25.670703 env[1104]: time="2023-10-02T19:25:25.670666492Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0cd0cbbbadfdd3b1aa859395880843ebf2f36a4cbd8029ae68855c87eabda34c pid=1675 runtime=io.containerd.runc.v2 Oct 2 19:25:25.680325 systemd[1]: Started cri-containerd-0cd0cbbbadfdd3b1aa859395880843ebf2f36a4cbd8029ae68855c87eabda34c.scope. Oct 2 19:25:25.683331 env[1104]: time="2023-10-02T19:25:25.683128233Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:25.683331 env[1104]: time="2023-10-02T19:25:25.683185610Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:25.683331 env[1104]: time="2023-10-02T19:25:25.683194928Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:25.683615 env[1104]: time="2023-10-02T19:25:25.683350489Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/66e55e90de5e137e0ffdb0083acc64316697f6953048760ed209f2970e7e5878 pid=1702 runtime=io.containerd.runc.v2 Oct 2 19:25:25.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.688000 audit: BPF prog-id=61 op=LOAD Oct 2 19:25:25.690109 env[1104]: time="2023-10-02T19:25:25.688907851Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:25.690109 env[1104]: time="2023-10-02T19:25:25.688955601Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:25.690109 env[1104]: time="2023-10-02T19:25:25.688974737Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:25.690109 env[1104]: time="2023-10-02T19:25:25.689066629Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/93e4f8e9ad5ef63c6c5c675572a31d570d2a0a2591313a9a748638f144125db4 pid=1728 runtime=io.containerd.runc.v2 Oct 2 19:25:25.688000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.688000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1675 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063643063626262616466646433623161613835393339353838303834 Oct 2 19:25:25.689000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.689000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1675 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063643063626262616466646433623161613835393339353838303834 Oct 2 19:25:25.689000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.689000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.689000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.689000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.689000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.689000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.689000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.689000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.689000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.689000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.689000 audit: BPF prog-id=62 op=LOAD Oct 2 19:25:25.689000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003da700 items=0 ppid=1675 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063643063626262616466646433623161613835393339353838303834 Oct 2 19:25:25.690000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.690000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.690000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.690000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.690000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.690000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.690000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.690000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.690000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.690000 audit: BPF prog-id=63 op=LOAD Oct 2 19:25:25.690000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003da748 items=0 ppid=1675 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063643063626262616466646433623161613835393339353838303834 Oct 2 19:25:25.690000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:25:25.691000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:25:25.691000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.691000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.691000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.691000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.691000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.691000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.691000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.691000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.691000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.691000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.691000 audit: BPF prog-id=64 op=LOAD Oct 2 19:25:25.691000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003dab58 items=0 ppid=1675 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063643063626262616466646433623161613835393339353838303834 Oct 2 19:25:25.693678 systemd[1]: Started cri-containerd-66e55e90de5e137e0ffdb0083acc64316697f6953048760ed209f2970e7e5878.scope. Oct 2 19:25:25.701874 systemd[1]: Started cri-containerd-93e4f8e9ad5ef63c6c5c675572a31d570d2a0a2591313a9a748638f144125db4.scope. Oct 2 19:25:25.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit: BPF prog-id=65 op=LOAD Oct 2 19:25:25.702000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1721]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000119c48 a2=10 a3=1c items=0 ppid=1702 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636653535653930646535653133376530666664623030383361636336 Oct 2 19:25:25.702000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001196b0 a2=3c a3=8 items=0 ppid=1702 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636653535653930646535653133376530666664623030383361636336 Oct 2 19:25:25.702000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.702000 audit: BPF prog-id=66 op=LOAD Oct 2 19:25:25.702000 audit[1721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001199d8 a2=78 a3=c00031d900 items=0 ppid=1702 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636653535653930646535653133376530666664623030383361636336 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit: BPF prog-id=67 op=LOAD Oct 2 19:25:25.703000 audit[1721]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000119770 a2=78 a3=c00031d948 items=0 ppid=1702 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636653535653930646535653133376530666664623030383361636336 Oct 2 19:25:25.703000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:25:25.703000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.703000 audit: BPF prog-id=68 op=LOAD Oct 2 19:25:25.703000 audit[1721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000119c30 a2=78 a3=c00031dd58 items=0 ppid=1702 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636653535653930646535653133376530666664623030383361636336 Oct 2 19:25:25.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.710000 audit: BPF prog-id=69 op=LOAD Oct 2 19:25:25.711000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.711000 audit[1744]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1728 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933653466386539616435656636336336633563363735353732613331 Oct 2 19:25:25.711000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.711000 audit[1744]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=1728 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933653466386539616435656636336336633563363735353732613331 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit: BPF prog-id=70 op=LOAD Oct 2 19:25:25.712000 audit[1744]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000308920 items=0 ppid=1728 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933653466386539616435656636336336633563363735353732613331 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.712000 audit: BPF prog-id=71 op=LOAD Oct 2 19:25:25.712000 audit[1744]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000308968 items=0 ppid=1728 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933653466386539616435656636336336633563363735353732613331 Oct 2 19:25:25.713000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:25:25.713000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:25:25.713000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.713000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.713000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.713000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.713000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.713000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.713000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.713000 audit[1744]: AVC avc: denied { perfmon } for pid=1744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.713000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.713000 audit[1744]: AVC avc: denied { bpf } for pid=1744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:25.713000 audit: BPF prog-id=72 op=LOAD Oct 2 19:25:25.713000 audit[1744]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000308d78 items=0 ppid=1728 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933653466386539616435656636336336633563363735353732613331 Oct 2 19:25:25.726127 env[1104]: time="2023-10-02T19:25:25.726084832Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:24fef87020af50fba838138f9686fc61,Namespace:kube-system,Attempt:0,} returns sandbox id \"0cd0cbbbadfdd3b1aa859395880843ebf2f36a4cbd8029ae68855c87eabda34c\"" Oct 2 19:25:25.726843 kubelet[1635]: E1002 19:25:25.726810 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:25.728735 env[1104]: time="2023-10-02T19:25:25.728713872Z" level=info msg="CreateContainer within sandbox \"0cd0cbbbadfdd3b1aa859395880843ebf2f36a4cbd8029ae68855c87eabda34c\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:25:25.730592 env[1104]: time="2023-10-02T19:25:25.730567468Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:739aed54d4db37e334c820123f8ea719,Namespace:kube-system,Attempt:0,} returns sandbox id \"66e55e90de5e137e0ffdb0083acc64316697f6953048760ed209f2970e7e5878\"" Oct 2 19:25:25.730973 kubelet[1635]: E1002 19:25:25.730959 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:25.732672 kubelet[1635]: W1002 19:25:25.732649 1635 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:25.732717 kubelet[1635]: E1002 19:25:25.732678 1635 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:25.732938 env[1104]: time="2023-10-02T19:25:25.732910743Z" level=info msg="CreateContainer within sandbox \"66e55e90de5e137e0ffdb0083acc64316697f6953048760ed209f2970e7e5878\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:25:25.740709 env[1104]: time="2023-10-02T19:25:25.740639447Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:80b8b8966aa7d1c422f3be2bfac9c13f,Namespace:kube-system,Attempt:0,} returns sandbox id \"93e4f8e9ad5ef63c6c5c675572a31d570d2a0a2591313a9a748638f144125db4\"" Oct 2 19:25:25.741107 kubelet[1635]: E1002 19:25:25.741089 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:25.742376 env[1104]: time="2023-10-02T19:25:25.742347800Z" level=info msg="CreateContainer within sandbox \"93e4f8e9ad5ef63c6c5c675572a31d570d2a0a2591313a9a748638f144125db4\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:25:25.907078 kubelet[1635]: E1002 19:25:25.906995 1635 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="3.2s" Oct 2 19:25:25.951135 kubelet[1635]: W1002 19:25:25.951075 1635 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:25.951135 kubelet[1635]: E1002 19:25:25.951126 1635 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:26.010102 kubelet[1635]: I1002 19:25:26.010075 1635 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:26.010435 kubelet[1635]: E1002 19:25:26.010281 1635 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.8:6443/api/v1/nodes\": dial tcp 10.0.0.8:6443: connect: connection refused" node="localhost" Oct 2 19:25:26.233002 env[1104]: time="2023-10-02T19:25:26.232861859Z" level=info msg="CreateContainer within sandbox \"0cd0cbbbadfdd3b1aa859395880843ebf2f36a4cbd8029ae68855c87eabda34c\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"90912854acef8834a46c35403e896b3c954523e44bb7f3a46c03498273fc008f\"" Oct 2 19:25:26.233520 env[1104]: time="2023-10-02T19:25:26.233489206Z" level=info msg="StartContainer for \"90912854acef8834a46c35403e896b3c954523e44bb7f3a46c03498273fc008f\"" Oct 2 19:25:26.235504 env[1104]: time="2023-10-02T19:25:26.235459691Z" level=info msg="CreateContainer within sandbox \"66e55e90de5e137e0ffdb0083acc64316697f6953048760ed209f2970e7e5878\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"94e6084ee291e98fd4bac9d5ca270f47cb8070c48c06ff9c10efc687cf1cd872\"" Oct 2 19:25:26.236026 env[1104]: time="2023-10-02T19:25:26.235994194Z" level=info msg="StartContainer for \"94e6084ee291e98fd4bac9d5ca270f47cb8070c48c06ff9c10efc687cf1cd872\"" Oct 2 19:25:26.237239 env[1104]: time="2023-10-02T19:25:26.236807058Z" level=info msg="CreateContainer within sandbox \"93e4f8e9ad5ef63c6c5c675572a31d570d2a0a2591313a9a748638f144125db4\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"9c6c180164451d8420b03ec1e4ed8d4b9bc62b018e82ec181c9debff42759f96\"" Oct 2 19:25:26.237826 env[1104]: time="2023-10-02T19:25:26.237790092Z" level=info msg="StartContainer for \"9c6c180164451d8420b03ec1e4ed8d4b9bc62b018e82ec181c9debff42759f96\"" Oct 2 19:25:26.250605 systemd[1]: Started cri-containerd-90912854acef8834a46c35403e896b3c954523e44bb7f3a46c03498273fc008f.scope. Oct 2 19:25:26.253838 systemd[1]: Started cri-containerd-94e6084ee291e98fd4bac9d5ca270f47cb8070c48c06ff9c10efc687cf1cd872.scope. Oct 2 19:25:26.260930 systemd[1]: Started cri-containerd-9c6c180164451d8420b03ec1e4ed8d4b9bc62b018e82ec181c9debff42759f96.scope. Oct 2 19:25:26.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.263000 audit: BPF prog-id=73 op=LOAD Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1675 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930393132383534616365663838333461343663333534303365383936 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1675 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930393132383534616365663838333461343663333534303365383936 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit: BPF prog-id=74 op=LOAD Oct 2 19:25:26.264000 audit[1813]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00032e390 items=0 ppid=1675 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930393132383534616365663838333461343663333534303365383936 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit: BPF prog-id=75 op=LOAD Oct 2 19:25:26.264000 audit[1813]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00032e3d8 items=0 ppid=1675 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930393132383534616365663838333461343663333534303365383936 Oct 2 19:25:26.264000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:25:26.264000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { perfmon } for pid=1813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit[1813]: AVC avc: denied { bpf } for pid=1813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.264000 audit: BPF prog-id=76 op=LOAD Oct 2 19:25:26.264000 audit[1813]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00032e7e8 items=0 ppid=1675 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930393132383534616365663838333461343663333534303365383936 Oct 2 19:25:26.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit: BPF prog-id=77 op=LOAD Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1702 pid=1821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934653630383465653239316539386664346261633964356361323730 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1702 pid=1821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934653630383465653239316539386664346261633964356361323730 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit: BPF prog-id=78 op=LOAD Oct 2 19:25:26.268000 audit[1821]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003a17c0 items=0 ppid=1702 pid=1821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934653630383465653239316539386664346261633964356361323730 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.268000 audit: BPF prog-id=79 op=LOAD Oct 2 19:25:26.268000 audit[1821]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003a1808 items=0 ppid=1702 pid=1821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934653630383465653239316539386664346261633964356361323730 Oct 2 19:25:26.269000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:25:26.269000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:25:26.269000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.269000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.269000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.269000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.269000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.269000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.269000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.269000 audit[1821]: AVC avc: denied { perfmon } for pid=1821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.269000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.269000 audit[1821]: AVC avc: denied { bpf } for pid=1821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.269000 audit: BPF prog-id=80 op=LOAD Oct 2 19:25:26.269000 audit[1821]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003a1c18 items=0 ppid=1702 pid=1821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934653630383465653239316539386664346261633964356361323730 Oct 2 19:25:26.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit: BPF prog-id=81 op=LOAD Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1728 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366331383031363434353164383432306230336563316534656438 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1728 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366331383031363434353164383432306230336563316534656438 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit: BPF prog-id=82 op=LOAD Oct 2 19:25:26.273000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000308530 items=0 ppid=1728 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366331383031363434353164383432306230336563316534656438 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.273000 audit: BPF prog-id=83 op=LOAD Oct 2 19:25:26.273000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000308578 items=0 ppid=1728 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366331383031363434353164383432306230336563316534656438 Oct 2 19:25:26.273000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:25:26.273000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:25:26.274000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.274000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.274000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.274000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.274000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.274000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.274000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.274000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.274000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.274000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:26.274000 audit: BPF prog-id=84 op=LOAD Oct 2 19:25:26.274000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000308988 items=0 ppid=1728 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:26.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366331383031363434353164383432306230336563316534656438 Oct 2 19:25:26.296817 env[1104]: time="2023-10-02T19:25:26.296779408Z" level=info msg="StartContainer for \"90912854acef8834a46c35403e896b3c954523e44bb7f3a46c03498273fc008f\" returns successfully" Oct 2 19:25:26.301076 kubelet[1635]: W1002 19:25:26.301039 1635 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:26.301076 kubelet[1635]: E1002 19:25:26.301072 1635 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:25:26.301444 env[1104]: time="2023-10-02T19:25:26.301402067Z" level=info msg="StartContainer for \"94e6084ee291e98fd4bac9d5ca270f47cb8070c48c06ff9c10efc687cf1cd872\" returns successfully" Oct 2 19:25:26.309270 env[1104]: time="2023-10-02T19:25:26.309130090Z" level=info msg="StartContainer for \"9c6c180164451d8420b03ec1e4ed8d4b9bc62b018e82ec181c9debff42759f96\" returns successfully" Oct 2 19:25:26.928314 kubelet[1635]: E1002 19:25:26.928277 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:26.930282 kubelet[1635]: E1002 19:25:26.930251 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:26.931925 kubelet[1635]: E1002 19:25:26.931846 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:27.237000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.237000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000532000 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:25:27.237000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:27.237000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.237000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000538000 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:25:27.237000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:27.389000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.391744 kernel: kauditd_printk_skb: 561 callbacks suppressed Oct 2 19:25:27.391785 kernel: audit: type=1400 audit(1696274727.389:679): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.389000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c003424a20 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:25:27.397836 kernel: audit: type=1300 audit(1696274727.389:679): arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c003424a20 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:25:27.397869 kernel: audit: type=1327 audit(1696274727.389:679): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:25:27.389000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:25:27.400715 kernel: audit: type=1400 audit(1696274727.389:680): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.389000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.389000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c006b86020 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:25:27.406948 kernel: audit: type=1300 audit(1696274727.389:680): arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c006b86020 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:25:27.406984 kernel: audit: type=1327 audit(1696274727.389:680): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:25:27.389000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:25:27.390000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.412551 kernel: audit: type=1400 audit(1696274727.390:681): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.412677 kernel: audit: type=1300 audit(1696274727.390:681): arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c0033e6f90 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:25:27.390000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c0033e6f90 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:25:27.390000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:25:27.418202 kernel: audit: type=1327 audit(1696274727.390:681): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:25:27.420000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.420000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c006b87960 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:25:27.420000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:25:27.420000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.420000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c0036e6ff0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:25:27.420000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:25:27.420000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6800 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.420000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0036e73b0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:25:27.427592 kernel: audit: type=1400 audit(1696274727.420:682): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:27.420000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:25:27.934193 kubelet[1635]: E1002 19:25:27.934159 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:27.934541 kubelet[1635]: E1002 19:25:27.934402 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:27.934541 kubelet[1635]: E1002 19:25:27.934491 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:28.005665 kubelet[1635]: E1002 19:25:28.005622 1635 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "localhost" not found Oct 2 19:25:28.371007 kubelet[1635]: E1002 19:25:28.370972 1635 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "localhost" not found Oct 2 19:25:28.935638 kubelet[1635]: E1002 19:25:28.935608 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:29.037839 kubelet[1635]: E1002 19:25:29.037813 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:29.211385 kubelet[1635]: I1002 19:25:29.211292 1635 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:29.282310 kubelet[1635]: E1002 19:25:29.282273 1635 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 19:25:29.282618 kubelet[1635]: I1002 19:25:29.282601 1635 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:25:29.904401 kubelet[1635]: I1002 19:25:29.904352 1635 apiserver.go:52] "Watching apiserver" Oct 2 19:25:30.003363 kubelet[1635]: I1002 19:25:30.003305 1635 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:25:30.042592 kubelet[1635]: I1002 19:25:30.042530 1635 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:25:30.119726 kubelet[1635]: E1002 19:25:30.119683 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:30.938133 kubelet[1635]: E1002 19:25:30.938102 1635 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:32.135009 systemd[1]: Reloading. Oct 2 19:25:32.201293 /usr/lib/systemd/system-generators/torcx-generator[1929]: time="2023-10-02T19:25:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:25:32.201608 /usr/lib/systemd/system-generators/torcx-generator[1929]: time="2023-10-02T19:25:32Z" level=info msg="torcx already run" Oct 2 19:25:32.359928 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:25:32.359944 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:25:32.379635 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:25:32.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.453077 kernel: kauditd_printk_skb: 8 callbacks suppressed Oct 2 19:25:32.453208 kernel: audit: type=1400 audit(1696274732.443:685): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.453226 kernel: audit: type=1400 audit(1696274732.443:686): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.453239 kernel: audit: type=1400 audit(1696274732.443:687): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.453256 kernel: audit: type=1400 audit(1696274732.443:688): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.457105 kernel: audit: type=1400 audit(1696274732.443:689): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.457136 kernel: audit: type=1400 audit(1696274732.443:690): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.457150 kernel: audit: type=1400 audit(1696274732.443:691): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.458839 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:25:32.458870 kernel: audit: type=1400 audit(1696274732.443:692): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.461123 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:25:32.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.446000 audit: BPF prog-id=85 op=LOAD Oct 2 19:25:32.446000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:25:32.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.448000 audit: BPF prog-id=86 op=LOAD Oct 2 19:25:32.448000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:25:32.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.449000 audit: BPF prog-id=87 op=LOAD Oct 2 19:25:32.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.451000 audit: BPF prog-id=88 op=LOAD Oct 2 19:25:32.451000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:25:32.451000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:25:32.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.451000 audit: BPF prog-id=89 op=LOAD Oct 2 19:25:32.451000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:25:32.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.455000 audit: BPF prog-id=90 op=LOAD Oct 2 19:25:32.455000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:25:32.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit: BPF prog-id=91 op=LOAD Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit: BPF prog-id=92 op=LOAD Oct 2 19:25:32.460000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:25:32.460000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.460000 audit: BPF prog-id=93 op=LOAD Oct 2 19:25:32.460000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit: BPF prog-id=94 op=LOAD Oct 2 19:25:32.462000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit: BPF prog-id=95 op=LOAD Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit: BPF prog-id=96 op=LOAD Oct 2 19:25:32.462000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:25:32.462000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.463000 audit: BPF prog-id=97 op=LOAD Oct 2 19:25:32.463000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:25:32.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.465000 audit: BPF prog-id=98 op=LOAD Oct 2 19:25:32.465000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit: BPF prog-id=99 op=LOAD Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.466000 audit: BPF prog-id=100 op=LOAD Oct 2 19:25:32.466000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:25:32.466000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit: BPF prog-id=101 op=LOAD Oct 2 19:25:32.467000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.467000 audit: BPF prog-id=102 op=LOAD Oct 2 19:25:32.467000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit: BPF prog-id=103 op=LOAD Oct 2 19:25:32.468000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.468000 audit: BPF prog-id=104 op=LOAD Oct 2 19:25:32.468000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:25:32.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.470000 audit: BPF prog-id=105 op=LOAD Oct 2 19:25:32.470000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:25:32.480174 kubelet[1635]: I1002 19:25:32.480137 1635 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:25:32.480152 systemd[1]: Stopping kubelet.service... Oct 2 19:25:32.500760 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:25:32.500914 systemd[1]: Stopped kubelet.service. Oct 2 19:25:32.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.502301 systemd[1]: Started kubelet.service. Oct 2 19:25:32.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.553232 kubelet[1969]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:25:32.553232 kubelet[1969]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:25:32.553232 kubelet[1969]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:25:32.553232 kubelet[1969]: I1002 19:25:32.553142 1969 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:25:32.556945 kubelet[1969]: I1002 19:25:32.556854 1969 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:25:32.556945 kubelet[1969]: I1002 19:25:32.556881 1969 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:25:32.557164 kubelet[1969]: I1002 19:25:32.557103 1969 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:25:32.558619 kubelet[1969]: I1002 19:25:32.558598 1969 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:25:32.559477 kubelet[1969]: I1002 19:25:32.559450 1969 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:25:32.558000 audit[1982]: USER_ACCT pid=1982 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.560235 sudo[1982]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:25:32.558000 audit[1982]: CRED_REFR pid=1982 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.560398 sudo[1982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:25:32.560000 audit[1982]: USER_START pid=1982 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.563047 kubelet[1969]: I1002 19:25:32.563031 1969 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:25:32.563214 kubelet[1969]: I1002 19:25:32.563194 1969 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:25:32.563273 kubelet[1969]: I1002 19:25:32.563262 1969 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:25:32.563343 kubelet[1969]: I1002 19:25:32.563280 1969 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:25:32.563343 kubelet[1969]: I1002 19:25:32.563293 1969 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:25:32.563343 kubelet[1969]: I1002 19:25:32.563318 1969 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:25:32.570085 kubelet[1969]: I1002 19:25:32.570053 1969 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:25:32.570085 kubelet[1969]: I1002 19:25:32.570080 1969 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:25:32.570085 kubelet[1969]: I1002 19:25:32.570097 1969 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:25:32.570261 kubelet[1969]: I1002 19:25:32.570110 1969 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:25:32.570789 kubelet[1969]: I1002 19:25:32.570761 1969 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:25:32.571211 kubelet[1969]: I1002 19:25:32.571190 1969 server.go:1168] "Started kubelet" Oct 2 19:25:32.573000 audit[1969]: AVC avc: denied { mac_admin } for pid=1969 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.573000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:25:32.573000 audit[1969]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a5d470 a1=c0004c4048 a2=c000a5d440 a3=25 items=0 ppid=1 pid=1969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.573000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:25:32.575000 audit[1969]: AVC avc: denied { mac_admin } for pid=1969 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.575000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:25:32.575000 audit[1969]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a5ac40 a1=c0004c4060 a2=c000a5d500 a3=25 items=0 ppid=1 pid=1969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.575000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:25:32.583435 kubelet[1969]: I1002 19:25:32.574444 1969 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:25:32.583435 kubelet[1969]: I1002 19:25:32.574680 1969 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:25:32.583435 kubelet[1969]: I1002 19:25:32.575272 1969 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:25:32.583435 kubelet[1969]: I1002 19:25:32.576620 1969 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:25:32.583435 kubelet[1969]: I1002 19:25:32.576679 1969 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:25:32.583435 kubelet[1969]: I1002 19:25:32.576704 1969 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:25:32.583435 kubelet[1969]: I1002 19:25:32.578030 1969 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:25:32.583435 kubelet[1969]: I1002 19:25:32.578112 1969 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:25:32.590898 kubelet[1969]: E1002 19:25:32.590869 1969 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:25:32.590898 kubelet[1969]: E1002 19:25:32.590901 1969 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:25:32.592544 kubelet[1969]: I1002 19:25:32.592530 1969 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:25:32.593265 kubelet[1969]: I1002 19:25:32.593255 1969 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:25:32.593361 kubelet[1969]: I1002 19:25:32.593348 1969 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:25:32.593437 kubelet[1969]: I1002 19:25:32.593424 1969 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:25:32.593537 kubelet[1969]: E1002 19:25:32.593525 1969 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:25:32.632296 kubelet[1969]: I1002 19:25:32.632272 1969 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:25:32.632472 kubelet[1969]: I1002 19:25:32.632459 1969 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:25:32.632546 kubelet[1969]: I1002 19:25:32.632533 1969 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:25:32.632773 kubelet[1969]: I1002 19:25:32.632761 1969 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:25:32.632845 kubelet[1969]: I1002 19:25:32.632833 1969 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:25:32.632910 kubelet[1969]: I1002 19:25:32.632897 1969 policy_none.go:49] "None policy: Start" Oct 2 19:25:32.633516 kubelet[1969]: I1002 19:25:32.633504 1969 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:25:32.633610 kubelet[1969]: I1002 19:25:32.633598 1969 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:25:32.633772 kubelet[1969]: I1002 19:25:32.633760 1969 state_mem.go:75] "Updated machine memory state" Oct 2 19:25:32.636874 kubelet[1969]: I1002 19:25:32.636862 1969 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:25:32.635000 audit[1969]: AVC avc: denied { mac_admin } for pid=1969 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:32.635000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:25:32.635000 audit[1969]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000871d70 a1=c001218000 a2=c000871d40 a3=25 items=0 ppid=1 pid=1969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.635000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:25:32.638459 kubelet[1969]: I1002 19:25:32.638445 1969 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:25:32.638707 kubelet[1969]: I1002 19:25:32.638696 1969 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:25:32.681269 kubelet[1969]: I1002 19:25:32.681242 1969 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:25:32.694349 kubelet[1969]: I1002 19:25:32.694321 1969 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:25:32.694407 kubelet[1969]: I1002 19:25:32.694399 1969 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:25:32.694468 kubelet[1969]: I1002 19:25:32.694434 1969 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:25:32.778709 kubelet[1969]: I1002 19:25:32.778601 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/739aed54d4db37e334c820123f8ea719-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"739aed54d4db37e334c820123f8ea719\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:32.778709 kubelet[1969]: I1002 19:25:32.778644 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:32.778709 kubelet[1969]: I1002 19:25:32.778666 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:32.778912 kubelet[1969]: I1002 19:25:32.778824 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/739aed54d4db37e334c820123f8ea719-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"739aed54d4db37e334c820123f8ea719\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:32.778912 kubelet[1969]: I1002 19:25:32.778887 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/739aed54d4db37e334c820123f8ea719-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"739aed54d4db37e334c820123f8ea719\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:25:32.778912 kubelet[1969]: I1002 19:25:32.778910 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:32.779005 kubelet[1969]: I1002 19:25:32.778928 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:32.779005 kubelet[1969]: I1002 19:25:32.778979 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:32.779005 kubelet[1969]: I1002 19:25:32.779000 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/24fef87020af50fba838138f9686fc61-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"24fef87020af50fba838138f9686fc61\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:25:33.014033 sudo[1982]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:33.012000 audit[1982]: USER_END pid=1982 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:33.012000 audit[1982]: CRED_DISP pid=1982 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:33.290342 kubelet[1969]: E1002 19:25:33.290310 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:33.290665 kubelet[1969]: E1002 19:25:33.290635 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:33.575283 kubelet[1969]: I1002 19:25:33.575248 1969 apiserver.go:52] "Watching apiserver" Oct 2 19:25:33.578203 kubelet[1969]: I1002 19:25:33.578174 1969 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:25:33.583352 kubelet[1969]: I1002 19:25:33.583328 1969 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:25:33.607033 kubelet[1969]: E1002 19:25:33.607001 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:34.318466 kubelet[1969]: E1002 19:25:34.318405 1969 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:25:34.319387 kubelet[1969]: E1002 19:25:34.319360 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:34.362927 kubelet[1969]: I1002 19:25:34.362881 1969 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:25:34.363081 kubelet[1969]: I1002 19:25:34.363028 1969 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:25:34.363722 kubelet[1969]: E1002 19:25:34.363702 1969 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:25:34.364169 kubelet[1969]: E1002 19:25:34.364140 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:34.399750 kubelet[1969]: I1002 19:25:34.399705 1969 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=4.399653099 podCreationTimestamp="2023-10-02 19:25:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:25:34.381616074 +0000 UTC m=+1.876395019" watchObservedRunningTime="2023-10-02 19:25:34.399653099 +0000 UTC m=+1.894432044" Oct 2 19:25:34.406615 kubelet[1969]: I1002 19:25:34.406572 1969 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.406519896 podCreationTimestamp="2023-10-02 19:25:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:25:34.400216962 +0000 UTC m=+1.894995907" watchObservedRunningTime="2023-10-02 19:25:34.406519896 +0000 UTC m=+1.901298841" Oct 2 19:25:34.608204 kubelet[1969]: E1002 19:25:34.608170 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:34.608752 kubelet[1969]: E1002 19:25:34.608721 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:34.608968 kubelet[1969]: E1002 19:25:34.608725 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:34.842292 kubelet[1969]: I1002 19:25:34.842258 1969 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.842213841 podCreationTimestamp="2023-10-02 19:25:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:25:34.406483866 +0000 UTC m=+1.901262811" watchObservedRunningTime="2023-10-02 19:25:34.842213841 +0000 UTC m=+2.336992786" Oct 2 19:25:35.186361 sudo[1230]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:35.184000 audit[1230]: USER_END pid=1230 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:35.184000 audit[1230]: CRED_DISP pid=1230 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:35.188182 sshd[1227]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:35.187000 audit[1227]: USER_END pid=1227 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:35.187000 audit[1227]: CRED_DISP pid=1227 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:35.190601 systemd[1]: sshd@6-10.0.0.8:22-10.0.0.1:36460.service: Deactivated successfully. Oct 2 19:25:35.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.8:22-10.0.0.1:36460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:35.191219 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:25:35.191363 systemd[1]: session-7.scope: Consumed 2.924s CPU time. Oct 2 19:25:35.191722 systemd-logind[1089]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:25:35.192297 systemd-logind[1089]: Removed session 7. Oct 2 19:25:35.784000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:35.784000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009b3140 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:25:35.784000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:35.785000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:35.785000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009b3180 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:25:35.785000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:35.786000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:35.786000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009b32c0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:25:35.786000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:35.787000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:35.787000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000da92c0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:25:35.787000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:35.933000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32591 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:25:35.933000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000dfe200 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:25:35.933000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:38.556506 kubelet[1969]: E1002 19:25:38.556469 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:38.613163 kubelet[1969]: E1002 19:25:38.613118 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:39.506987 kubelet[1969]: E1002 19:25:39.506946 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:39.546063 kubelet[1969]: E1002 19:25:39.546018 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:39.617582 kubelet[1969]: E1002 19:25:39.614936 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:39.617582 kubelet[1969]: E1002 19:25:39.614984 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:40.615910 kubelet[1969]: E1002 19:25:40.615880 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:45.129275 update_engine[1090]: I1002 19:25:45.129227 1090 update_attempter.cc:505] Updating boot flags... Oct 2 19:25:47.930201 kubelet[1969]: I1002 19:25:47.930176 1969 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:25:47.930684 env[1104]: time="2023-10-02T19:25:47.930636834Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:25:47.930905 kubelet[1969]: I1002 19:25:47.930885 1969 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:25:48.512822 kubelet[1969]: I1002 19:25:48.512781 1969 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:25:48.518426 systemd[1]: Created slice kubepods-besteffort-pod1360606c_bb52_4c67_9ae5_a8a22f893607.slice. Oct 2 19:25:48.520123 kubelet[1969]: I1002 19:25:48.520089 1969 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:25:48.528964 systemd[1]: Created slice kubepods-burstable-podafed1df9_5b85_4fe1_8f73_4e7c8d6a65da.slice. Oct 2 19:25:48.582443 kubelet[1969]: I1002 19:25:48.582394 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1360606c-bb52-4c67-9ae5-a8a22f893607-xtables-lock\") pod \"kube-proxy-jcssq\" (UID: \"1360606c-bb52-4c67-9ae5-a8a22f893607\") " pod="kube-system/kube-proxy-jcssq" Oct 2 19:25:48.582443 kubelet[1969]: I1002 19:25:48.582431 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-lib-modules\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.582443 kubelet[1969]: I1002 19:25:48.582447 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xxsf7\" (UniqueName: \"kubernetes.io/projected/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-kube-api-access-xxsf7\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.582751 kubelet[1969]: I1002 19:25:48.582463 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-hostproc\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.582751 kubelet[1969]: I1002 19:25:48.582480 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cilium-config-path\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.582751 kubelet[1969]: I1002 19:25:48.582601 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/1360606c-bb52-4c67-9ae5-a8a22f893607-kube-proxy\") pod \"kube-proxy-jcssq\" (UID: \"1360606c-bb52-4c67-9ae5-a8a22f893607\") " pod="kube-system/kube-proxy-jcssq" Oct 2 19:25:48.582751 kubelet[1969]: I1002 19:25:48.582641 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cilium-run\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.582751 kubelet[1969]: I1002 19:25:48.582659 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-xtables-lock\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.582751 kubelet[1969]: I1002 19:25:48.582683 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-etc-cni-netd\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.582961 kubelet[1969]: I1002 19:25:48.582700 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-host-proc-sys-net\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.582961 kubelet[1969]: I1002 19:25:48.582730 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cilium-cgroup\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.582961 kubelet[1969]: I1002 19:25:48.582766 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-host-proc-sys-kernel\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.582961 kubelet[1969]: I1002 19:25:48.582806 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1360606c-bb52-4c67-9ae5-a8a22f893607-lib-modules\") pod \"kube-proxy-jcssq\" (UID: \"1360606c-bb52-4c67-9ae5-a8a22f893607\") " pod="kube-system/kube-proxy-jcssq" Oct 2 19:25:48.582961 kubelet[1969]: I1002 19:25:48.582828 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dd22v\" (UniqueName: \"kubernetes.io/projected/1360606c-bb52-4c67-9ae5-a8a22f893607-kube-api-access-dd22v\") pod \"kube-proxy-jcssq\" (UID: \"1360606c-bb52-4c67-9ae5-a8a22f893607\") " pod="kube-system/kube-proxy-jcssq" Oct 2 19:25:48.583104 kubelet[1969]: I1002 19:25:48.582845 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-bpf-maps\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.583104 kubelet[1969]: I1002 19:25:48.582864 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-clustermesh-secrets\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.583104 kubelet[1969]: I1002 19:25:48.582881 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cni-path\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.583104 kubelet[1969]: I1002 19:25:48.582897 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-hubble-tls\") pod \"cilium-9xjf5\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " pod="kube-system/cilium-9xjf5" Oct 2 19:25:48.691313 kubelet[1969]: E1002 19:25:48.691279 1969 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:25:48.691313 kubelet[1969]: E1002 19:25:48.691308 1969 projected.go:198] Error preparing data for projected volume kube-api-access-dd22v for pod kube-system/kube-proxy-jcssq: configmap "kube-root-ca.crt" not found Oct 2 19:25:48.691459 kubelet[1969]: E1002 19:25:48.691371 1969 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/1360606c-bb52-4c67-9ae5-a8a22f893607-kube-api-access-dd22v podName:1360606c-bb52-4c67-9ae5-a8a22f893607 nodeName:}" failed. No retries permitted until 2023-10-02 19:25:49.191353201 +0000 UTC m=+16.686132136 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-dd22v" (UniqueName: "kubernetes.io/projected/1360606c-bb52-4c67-9ae5-a8a22f893607-kube-api-access-dd22v") pod "kube-proxy-jcssq" (UID: "1360606c-bb52-4c67-9ae5-a8a22f893607") : configmap "kube-root-ca.crt" not found Oct 2 19:25:48.692093 kubelet[1969]: E1002 19:25:48.692051 1969 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:25:48.692093 kubelet[1969]: E1002 19:25:48.692077 1969 projected.go:198] Error preparing data for projected volume kube-api-access-xxsf7 for pod kube-system/cilium-9xjf5: configmap "kube-root-ca.crt" not found Oct 2 19:25:48.692288 kubelet[1969]: E1002 19:25:48.692108 1969 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-kube-api-access-xxsf7 podName:afed1df9-5b85-4fe1-8f73-4e7c8d6a65da nodeName:}" failed. No retries permitted until 2023-10-02 19:25:49.192095507 +0000 UTC m=+16.686874452 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-xxsf7" (UniqueName: "kubernetes.io/projected/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-kube-api-access-xxsf7") pod "cilium-9xjf5" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da") : configmap "kube-root-ca.crt" not found Oct 2 19:25:48.908538 kubelet[1969]: I1002 19:25:48.908501 1969 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:25:48.914810 systemd[1]: Created slice kubepods-besteffort-pod5ea176c4_8a4f_49c6_a46d_f2e72616a44d.slice. Oct 2 19:25:48.985461 kubelet[1969]: I1002 19:25:48.985417 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5ea176c4-8a4f-49c6-a46d-f2e72616a44d-cilium-config-path\") pod \"cilium-operator-574c4bb98d-rxpsj\" (UID: \"5ea176c4-8a4f-49c6-a46d-f2e72616a44d\") " pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:25:48.985461 kubelet[1969]: I1002 19:25:48.985456 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-w8f9p\" (UniqueName: \"kubernetes.io/projected/5ea176c4-8a4f-49c6-a46d-f2e72616a44d-kube-api-access-w8f9p\") pod \"cilium-operator-574c4bb98d-rxpsj\" (UID: \"5ea176c4-8a4f-49c6-a46d-f2e72616a44d\") " pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:25:49.217945 kubelet[1969]: E1002 19:25:49.217789 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:49.218685 env[1104]: time="2023-10-02T19:25:49.218643719Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-rxpsj,Uid:5ea176c4-8a4f-49c6-a46d-f2e72616a44d,Namespace:kube-system,Attempt:0,}" Oct 2 19:25:49.426440 kubelet[1969]: E1002 19:25:49.426383 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:49.427168 env[1104]: time="2023-10-02T19:25:49.426900625Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jcssq,Uid:1360606c-bb52-4c67-9ae5-a8a22f893607,Namespace:kube-system,Attempt:0,}" Oct 2 19:25:49.431142 kubelet[1969]: E1002 19:25:49.431105 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:49.431415 env[1104]: time="2023-10-02T19:25:49.431385445Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-9xjf5,Uid:afed1df9-5b85-4fe1-8f73-4e7c8d6a65da,Namespace:kube-system,Attempt:0,}" Oct 2 19:25:49.576966 env[1104]: time="2023-10-02T19:25:49.576856174Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:49.577079 env[1104]: time="2023-10-02T19:25:49.576972774Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:49.577079 env[1104]: time="2023-10-02T19:25:49.577000377Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:49.577394 env[1104]: time="2023-10-02T19:25:49.577178995Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3 pid=2076 runtime=io.containerd.runc.v2 Oct 2 19:25:49.579227 env[1104]: time="2023-10-02T19:25:49.579055878Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:49.579227 env[1104]: time="2023-10-02T19:25:49.579098168Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:49.579227 env[1104]: time="2023-10-02T19:25:49.579110632Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:49.579434 env[1104]: time="2023-10-02T19:25:49.579393156Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dc287e53319a2932c205c6e85c3c50f9ffa24047e35132987a866334e45799e7 pid=2090 runtime=io.containerd.runc.v2 Oct 2 19:25:49.581882 env[1104]: time="2023-10-02T19:25:49.581819790Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:49.581882 env[1104]: time="2023-10-02T19:25:49.581846321Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:49.581882 env[1104]: time="2023-10-02T19:25:49.581859936Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:49.582103 env[1104]: time="2023-10-02T19:25:49.582062650Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7 pid=2103 runtime=io.containerd.runc.v2 Oct 2 19:25:49.589929 systemd[1]: Started cri-containerd-286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3.scope. Oct 2 19:25:49.595945 systemd[1]: Started cri-containerd-4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7.scope. Oct 2 19:25:49.600869 systemd[1]: Started cri-containerd-dc287e53319a2932c205c6e85c3c50f9ffa24047e35132987a866334e45799e7.scope. Oct 2 19:25:49.608603 kernel: kauditd_printk_skb: 275 callbacks suppressed Oct 2 19:25:49.608743 kernel: audit: type=1400 audit(1696274749.601:948): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.608770 kernel: audit: type=1400 audit(1696274749.601:949): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.608793 kernel: audit: type=1400 audit(1696274749.601:950): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.611787 kernel: audit: type=1400 audit(1696274749.601:951): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.613944 kernel: audit: type=1400 audit(1696274749.601:952): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.616291 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:25:49.616333 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:25:49.616361 kernel: audit: backlog limit exceeded Oct 2 19:25:49.616730 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:25:49.618033 kernel: audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:25:49.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.602000 audit: BPF prog-id=106 op=LOAD Oct 2 19:25:49.609000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.609000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000195c48 a2=10 a3=1c items=0 ppid=2076 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238366361366431663732336133383733623237373037356362343763 Oct 2 19:25:49.609000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.609000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001956b0 a2=3c a3=c items=0 ppid=2076 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238366361366431663732336133383733623237373037356362343763 Oct 2 19:25:49.609000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.609000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.609000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.609000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.609000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.609000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.609000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.609000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.609000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.609000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.609000 audit: BPF prog-id=107 op=LOAD Oct 2 19:25:49.609000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001959d8 a2=78 a3=c000400ac0 items=0 ppid=2076 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238366361366431663732336133383733623237373037356362343763 Oct 2 19:25:49.611000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.611000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.611000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.611000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.611000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.611000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.611000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.611000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.611000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.611000 audit: BPF prog-id=108 op=LOAD Oct 2 19:25:49.611000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000195770 a2=78 a3=c000400b08 items=0 ppid=2076 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238366361366431663732336133383733623237373037356362343763 Oct 2 19:25:49.613000 audit: BPF prog-id=108 op=UNLOAD Oct 2 19:25:49.613000 audit: BPF prog-id=107 op=UNLOAD Oct 2 19:25:49.613000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.613000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.613000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.613000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.613000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.613000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.613000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.613000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.613000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.613000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.613000 audit: BPF prog-id=109 op=LOAD Oct 2 19:25:49.613000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000195c30 a2=78 a3=c000400f18 items=0 ppid=2076 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238366361366431663732336133383733623237373037356362343763 Oct 2 19:25:49.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.618000 audit: BPF prog-id=111 op=LOAD Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2103 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461313437393461376439616339396562366464653435646364376666 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2103 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461313437393461376439616339396562366464653435646364376666 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit: BPF prog-id=112 op=LOAD Oct 2 19:25:49.619000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000308610 items=0 ppid=2103 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461313437393461376439616339396562366464653435646364376666 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit: BPF prog-id=113 op=LOAD Oct 2 19:25:49.619000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000308658 items=0 ppid=2103 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461313437393461376439616339396562366464653435646364376666 Oct 2 19:25:49.619000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:25:49.619000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.619000 audit: BPF prog-id=114 op=LOAD Oct 2 19:25:49.619000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000308a68 items=0 ppid=2103 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461313437393461376439616339396562366464653435646364376666 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2090 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463323837653533333139613239333263323035633665383563336335 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2090 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463323837653533333139613239333263323035633665383563336335 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit: BPF prog-id=115 op=LOAD Oct 2 19:25:49.621000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a14b0 items=0 ppid=2090 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463323837653533333139613239333263323035633665383563336335 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit: BPF prog-id=116 op=LOAD Oct 2 19:25:49.621000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000a14f8 items=0 ppid=2090 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463323837653533333139613239333263323035633665383563336335 Oct 2 19:25:49.621000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:25:49.621000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.621000 audit: BPF prog-id=117 op=LOAD Oct 2 19:25:49.621000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000a1908 items=0 ppid=2090 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463323837653533333139613239333263323035633665383563336335 Oct 2 19:25:49.632659 env[1104]: time="2023-10-02T19:25:49.632622390Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-9xjf5,Uid:afed1df9-5b85-4fe1-8f73-4e7c8d6a65da,Namespace:kube-system,Attempt:0,} returns sandbox id \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\"" Oct 2 19:25:49.633470 kubelet[1969]: E1002 19:25:49.633440 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:49.634504 env[1104]: time="2023-10-02T19:25:49.634462023Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:25:49.637332 env[1104]: time="2023-10-02T19:25:49.637303482Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jcssq,Uid:1360606c-bb52-4c67-9ae5-a8a22f893607,Namespace:kube-system,Attempt:0,} returns sandbox id \"dc287e53319a2932c205c6e85c3c50f9ffa24047e35132987a866334e45799e7\"" Oct 2 19:25:49.637704 kubelet[1969]: E1002 19:25:49.637687 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:49.641488 env[1104]: time="2023-10-02T19:25:49.641434983Z" level=info msg="CreateContainer within sandbox \"dc287e53319a2932c205c6e85c3c50f9ffa24047e35132987a866334e45799e7\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:25:49.647153 env[1104]: time="2023-10-02T19:25:49.647086972Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-rxpsj,Uid:5ea176c4-8a4f-49c6-a46d-f2e72616a44d,Namespace:kube-system,Attempt:0,} returns sandbox id \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\"" Oct 2 19:25:49.647845 kubelet[1969]: E1002 19:25:49.647819 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:49.658606 env[1104]: time="2023-10-02T19:25:49.658551465Z" level=info msg="CreateContainer within sandbox \"dc287e53319a2932c205c6e85c3c50f9ffa24047e35132987a866334e45799e7\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"5e997ac58df6a75edbd6b91cd0b01b4b5ad67060158b99137d0f01fcad996965\"" Oct 2 19:25:49.659905 env[1104]: time="2023-10-02T19:25:49.659094343Z" level=info msg="StartContainer for \"5e997ac58df6a75edbd6b91cd0b01b4b5ad67060158b99137d0f01fcad996965\"" Oct 2 19:25:49.677690 systemd[1]: Started cri-containerd-5e997ac58df6a75edbd6b91cd0b01b4b5ad67060158b99137d0f01fcad996965.scope. Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2090 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565393937616335386466366137356564626436623931636430623031 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit: BPF prog-id=118 op=LOAD Oct 2 19:25:49.692000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000dfbe0 items=0 ppid=2090 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565393937616335386466366137356564626436623931636430623031 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit: BPF prog-id=119 op=LOAD Oct 2 19:25:49.692000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000dfc28 items=0 ppid=2090 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565393937616335386466366137356564626436623931636430623031 Oct 2 19:25:49.692000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:25:49.692000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:49.692000 audit: BPF prog-id=120 op=LOAD Oct 2 19:25:49.692000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000dfcb8 items=0 ppid=2090 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565393937616335386466366137356564626436623931636430623031 Oct 2 19:25:49.705152 env[1104]: time="2023-10-02T19:25:49.705097037Z" level=info msg="StartContainer for \"5e997ac58df6a75edbd6b91cd0b01b4b5ad67060158b99137d0f01fcad996965\" returns successfully" Oct 2 19:25:49.746000 audit[2243]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.746000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffea9e06350 a2=0 a3=7ffea9e0633c items=0 ppid=2203 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.746000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:25:49.747000 audit[2245]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2245 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.747000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeac9ed810 a2=0 a3=7ffeac9ed7fc items=0 ppid=2203 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.747000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:25:49.747000 audit[2244]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.747000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe5f89e690 a2=0 a3=7ffe5f89e67c items=0 ppid=2203 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.747000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:25:49.748000 audit[2246]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.748000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff83f152f0 a2=0 a3=7fff83f152dc items=0 ppid=2203 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.748000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:25:49.748000 audit[2247]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.748000 audit[2247]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf917c800 a2=0 a3=7ffdf917c7ec items=0 ppid=2203 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.748000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:25:49.750000 audit[2248]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.750000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe54e48e0 a2=0 a3=7fffe54e48cc items=0 ppid=2203 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.750000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:25:49.850000 audit[2249]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.850000 audit[2249]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fffcc6afec0 a2=0 a3=7fffcc6afeac items=0 ppid=2203 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.850000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:25:49.853000 audit[2251]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.853000 audit[2251]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcd0ad32f0 a2=0 a3=7ffcd0ad32dc items=0 ppid=2203 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.853000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:25:49.857000 audit[2254]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.857000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd41535700 a2=0 a3=7ffd415356ec items=0 ppid=2203 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.857000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:25:49.858000 audit[2255]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.858000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffd6fdf610 a2=0 a3=7fffd6fdf5fc items=0 ppid=2203 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.858000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:25:49.860000 audit[2257]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.860000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd4779bc00 a2=0 a3=7ffd4779bbec items=0 ppid=2203 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.860000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:25:49.861000 audit[2258]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.861000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2e5dff30 a2=0 a3=7ffe2e5dff1c items=0 ppid=2203 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.861000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:25:49.863000 audit[2260]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.863000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffecd611dc0 a2=0 a3=7ffecd611dac items=0 ppid=2203 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.863000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:25:49.865000 audit[2263]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.865000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd4e0dccc0 a2=0 a3=7ffd4e0dccac items=0 ppid=2203 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.865000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:25:49.866000 audit[2264]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.866000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff60ac8b10 a2=0 a3=7fff60ac8afc items=0 ppid=2203 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.866000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:25:49.868000 audit[2266]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.868000 audit[2266]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd66fd1260 a2=0 a3=7ffd66fd124c items=0 ppid=2203 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.868000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:25:49.869000 audit[2267]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.869000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc0d831c70 a2=0 a3=7ffc0d831c5c items=0 ppid=2203 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.869000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:25:49.871000 audit[2269]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.871000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffceb7a1210 a2=0 a3=7ffceb7a11fc items=0 ppid=2203 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.871000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:25:49.874000 audit[2272]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.874000 audit[2272]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe42816e10 a2=0 a3=7ffe42816dfc items=0 ppid=2203 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.874000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:25:49.877000 audit[2275]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.877000 audit[2275]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffea7504c80 a2=0 a3=7ffea7504c6c items=0 ppid=2203 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.877000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:25:49.878000 audit[2276]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.878000 audit[2276]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffffbca43a0 a2=0 a3=7ffffbca438c items=0 ppid=2203 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.878000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:25:49.880000 audit[2278]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.880000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff7fe7e730 a2=0 a3=7fff7fe7e71c items=0 ppid=2203 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.880000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:25:49.882000 audit[2281]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.882000 audit[2281]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc4007b200 a2=0 a3=7ffc4007b1ec items=0 ppid=2203 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.882000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:25:49.887000 audit[2286]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.887000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe962672b0 a2=0 a3=7ffe9626729c items=0 ppid=2203 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.887000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:25:49.888000 audit[2288]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2288 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:49.888000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fffe971d780 a2=0 a3=7fffe971d76c items=0 ppid=2203 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.888000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:25:49.899000 audit[2290]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:49.899000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7fff31bb2c70 a2=0 a3=7fff31bb2c5c items=0 ppid=2203 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.899000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:49.909000 audit[2290]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:49.909000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7fff31bb2c70 a2=0 a3=7fff31bb2c5c items=0 ppid=2203 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.909000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:49.911000 audit[2296]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.911000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc07ae8ca0 a2=0 a3=7ffc07ae8c8c items=0 ppid=2203 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.911000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:25:49.912000 audit[2298]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.912000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc70e79a40 a2=0 a3=7ffc70e79a2c items=0 ppid=2203 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.912000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:25:49.915000 audit[2301]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.915000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe37dd94a0 a2=0 a3=7ffe37dd948c items=0 ppid=2203 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.915000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:25:49.916000 audit[2302]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.916000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff50d2d900 a2=0 a3=7fff50d2d8ec items=0 ppid=2203 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.916000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:25:49.918000 audit[2304]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.918000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff8a3a6c60 a2=0 a3=7fff8a3a6c4c items=0 ppid=2203 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.918000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:25:49.918000 audit[2305]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.918000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe1f1f37f0 a2=0 a3=7ffe1f1f37dc items=0 ppid=2203 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.918000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:25:49.920000 audit[2307]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.920000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc898da580 a2=0 a3=7ffc898da56c items=0 ppid=2203 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.920000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:25:49.923000 audit[2310]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.923000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fff9613dc80 a2=0 a3=7fff9613dc6c items=0 ppid=2203 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.923000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:25:49.924000 audit[2311]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.924000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff08266a50 a2=0 a3=7fff08266a3c items=0 ppid=2203 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.924000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:25:49.926000 audit[2313]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.926000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffa800b460 a2=0 a3=7fffa800b44c items=0 ppid=2203 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.926000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:25:49.927000 audit[2314]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.927000 audit[2314]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffebacd6b40 a2=0 a3=7ffebacd6b2c items=0 ppid=2203 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.927000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:25:49.928000 audit[2316]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.928000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffec37a2fb0 a2=0 a3=7ffec37a2f9c items=0 ppid=2203 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.928000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:25:49.931000 audit[2319]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.931000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd844ae3d0 a2=0 a3=7ffd844ae3bc items=0 ppid=2203 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.931000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:25:49.934000 audit[2322]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2322 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.934000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe868dbce0 a2=0 a3=7ffe868dbccc items=0 ppid=2203 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.934000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:25:49.935000 audit[2323]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2323 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.935000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffce7207970 a2=0 a3=7ffce720795c items=0 ppid=2203 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.935000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:25:49.937000 audit[2325]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.937000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff466e73e0 a2=0 a3=7fff466e73cc items=0 ppid=2203 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.937000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:25:49.939000 audit[2328]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.939000 audit[2328]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffe0486be90 a2=0 a3=7ffe0486be7c items=0 ppid=2203 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.939000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:25:49.940000 audit[2329]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2329 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.940000 audit[2329]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdcf9238c0 a2=0 a3=7ffdcf9238ac items=0 ppid=2203 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.940000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:25:49.942000 audit[2331]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.942000 audit[2331]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd48149c30 a2=0 a3=7ffd48149c1c items=0 ppid=2203 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.942000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:25:49.944000 audit[2334]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2334 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.944000 audit[2334]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffffd53a280 a2=0 a3=7ffffd53a26c items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.944000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:25:49.945000 audit[2335]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2335 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.945000 audit[2335]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff6597c700 a2=0 a3=7fff6597c6ec items=0 ppid=2203 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.945000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:25:49.947000 audit[2337]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2337 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:25:49.947000 audit[2337]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffdfff643c0 a2=0 a3=7ffdfff643ac items=0 ppid=2203 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.947000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:25:49.949000 audit[2339]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:25:49.949000 audit[2339]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffd7e2bce00 a2=0 a3=7ffd7e2bcdec items=0 ppid=2203 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.949000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:49.950000 audit[2339]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:25:49.950000 audit[2339]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffd7e2bce00 a2=0 a3=7ffd7e2bcdec items=0 ppid=2203 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.950000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:50.631300 kubelet[1969]: E1002 19:25:50.631245 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:25:50.641440 kubelet[1969]: I1002 19:25:50.641406 1969 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-jcssq" podStartSLOduration=2.6413636350000003 podCreationTimestamp="2023-10-02 19:25:48 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:25:50.641180839 +0000 UTC m=+18.135959815" watchObservedRunningTime="2023-10-02 19:25:50.641363635 +0000 UTC m=+18.136142580" Oct 2 19:25:55.428619 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount274930392.mount: Deactivated successfully. Oct 2 19:25:56.848343 systemd[1]: Started sshd@7-10.0.0.8:22-10.0.0.1:57278.service. Oct 2 19:25:56.849876 kernel: kauditd_printk_skb: 361 callbacks suppressed Oct 2 19:25:56.849930 kernel: audit: type=1130 audit(1696274756.847:1057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.8:22-10.0.0.1:57278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:56.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.8:22-10.0.0.1:57278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:56.887000 audit[2341]: USER_ACCT pid=2341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:56.888529 sshd[2341]: Accepted publickey for core from 10.0.0.1 port 57278 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:25:56.890000 audit[2341]: CRED_ACQ pid=2341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:56.891527 sshd[2341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:56.893570 kernel: audit: type=1101 audit(1696274756.887:1058): pid=2341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:56.893618 kernel: audit: type=1103 audit(1696274756.890:1059): pid=2341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:56.893639 kernel: audit: type=1006 audit(1696274756.890:1060): pid=2341 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:25:56.894986 kernel: audit: type=1300 audit(1696274756.890:1060): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc77298960 a2=3 a3=0 items=0 ppid=1 pid=2341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:56.890000 audit[2341]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc77298960 a2=3 a3=0 items=0 ppid=1 pid=2341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:56.895822 systemd-logind[1089]: New session 8 of user core. Oct 2 19:25:56.896615 systemd[1]: Started session-8.scope. Oct 2 19:25:56.890000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:56.899725 kernel: audit: type=1327 audit(1696274756.890:1060): proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:56.903000 audit[2341]: USER_START pid=2341 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:56.903000 audit[2343]: CRED_ACQ pid=2343 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:56.912588 kernel: audit: type=1105 audit(1696274756.903:1061): pid=2341 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:56.912697 kernel: audit: type=1103 audit(1696274756.903:1062): pid=2343 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:57.898841 sshd[2341]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:57.899000 audit[2341]: USER_END pid=2341 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:57.901533 systemd[1]: sshd@7-10.0.0.8:22-10.0.0.1:57278.service: Deactivated successfully. Oct 2 19:25:57.902401 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:25:57.899000 audit[2341]: CRED_DISP pid=2341 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:57.903339 systemd-logind[1089]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:25:57.904290 systemd-logind[1089]: Removed session 8. Oct 2 19:25:57.905719 kernel: audit: type=1106 audit(1696274757.899:1063): pid=2341 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:57.905778 kernel: audit: type=1104 audit(1696274757.899:1064): pid=2341 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:25:57.901000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.8:22-10.0.0.1:57278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:01.223579 env[1104]: time="2023-10-02T19:26:01.223484746Z" level=error msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" failed" error="failed to pull and unpack image \"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\": failed to extract layer sha256:e740935483f7a73330abd4cbc9a1d31fc068bd57fe9e037cb819828305ce43ec: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/40/fs/usr/lib/libcilium.so.1: no space left on device: unknown" Oct 2 19:26:01.224057 kubelet[1969]: E1002 19:26:01.223764 1969 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\": failed to extract layer sha256:e740935483f7a73330abd4cbc9a1d31fc068bd57fe9e037cb819828305ce43ec: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/40/fs/usr/lib/libcilium.so.1: no space left on device: unknown" image="quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5" Oct 2 19:26:01.224057 kubelet[1969]: E1002 19:26:01.223800 1969 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\": failed to extract layer sha256:e740935483f7a73330abd4cbc9a1d31fc068bd57fe9e037cb819828305ce43ec: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/40/fs/usr/lib/libcilium.so.1: no space left on device: unknown" image="quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5" Oct 2 19:26:01.224057 kubelet[1969]: E1002 19:26:01.224003 1969 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:26:01.224057 kubelet[1969]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:26:01.224057 kubelet[1969]: rm /hostbin/cilium-mount Oct 2 19:26:01.224594 kubelet[1969]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xxsf7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5": failed to extract layer sha256:e740935483f7a73330abd4cbc9a1d31fc068bd57fe9e037cb819828305ce43ec: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/40/fs/usr/lib/libcilium.so.1: no space left on device: unknown Oct 2 19:26:01.224686 env[1104]: time="2023-10-02T19:26:01.224102990Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:26:01.224722 kubelet[1969]: E1002 19:26:01.224057 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\\\": failed to extract layer sha256:e740935483f7a73330abd4cbc9a1d31fc068bd57fe9e037cb819828305ce43ec: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/40/fs/usr/lib/libcilium.so.1: no space left on device: unknown\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:26:01.523803 env[1104]: time="2023-10-02T19:26:01.523598050Z" level=error msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" failed" error="failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\": mkdir /var/lib/containerd/io.containerd.content.v1.content/ingest/ea546312b09f3951a0bca8eb6855b5d9402f70940f1ace6d9b56990fdd29b370: no space left on device" Oct 2 19:26:01.525156 kubelet[1969]: E1002 19:26:01.525105 1969 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\": mkdir /var/lib/containerd/io.containerd.content.v1.content/ingest/ea546312b09f3951a0bca8eb6855b5d9402f70940f1ace6d9b56990fdd29b370: no space left on device" image="quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e" Oct 2 19:26:01.525294 kubelet[1969]: E1002 19:26:01.525200 1969 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\": mkdir /var/lib/containerd/io.containerd.content.v1.content/ingest/ea546312b09f3951a0bca8eb6855b5d9402f70940f1ace6d9b56990fdd29b370: no space left on device" image="quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e" Oct 2 19:26:01.525368 kubelet[1969]: E1002 19:26:01.525334 1969 kuberuntime_manager.go:1212] container &Container{Name:cilium-operator,Image:quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Command:[cilium-operator-generic],Args:[--config-dir=/tmp/cilium/config-map --debug=$(CILIUM_DEBUG)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:K8S_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:CILIUM_K8S_NAMESPACE,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:CILIUM_DEBUG,Value:,ValueFrom:&EnvVarSource{FieldRef:nil,ResourceFieldRef:nil,ConfigMapKeyRef:&ConfigMapKeySelector{LocalObjectReference:LocalObjectReference{Name:cilium-config,},Key:debug,Optional:*true,},SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:cilium-config-path,ReadOnly:true,MountPath:/tmp/cilium/config-map,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-w8f9p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/healthz,Port:{0 9234 },Host:127.0.0.1,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:60,TimeoutSeconds:3,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-operator-574c4bb98d-rxpsj_kube-system(5ea176c4-8a4f-49c6-a46d-f2e72616a44d): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e": mkdir /var/lib/containerd/io.containerd.content.v1.content/ingest/ea546312b09f3951a0bca8eb6855b5d9402f70940f1ace6d9b56990fdd29b370: no space left on device Oct 2 19:26:01.525368 kubelet[1969]: E1002 19:26:01.525370 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"cilium-operator\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\\\": mkdir /var/lib/containerd/io.containerd.content.v1.content/ingest/ea546312b09f3951a0bca8eb6855b5d9402f70940f1ace6d9b56990fdd29b370: no space left on device\"" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" podUID=5ea176c4-8a4f-49c6-a46d-f2e72616a44d Oct 2 19:26:01.647990 kubelet[1969]: E1002 19:26:01.647960 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:01.647990 kubelet[1969]: E1002 19:26:01.647983 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:01.648586 kubelet[1969]: E1002 19:26:01.648550 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with ImagePullBackOff: \"Back-off pulling image \\\"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\\\"\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:26:01.648840 kubelet[1969]: E1002 19:26:01.648817 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"cilium-operator\" with ImagePullBackOff: \"Back-off pulling image \\\"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\\\"\"" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" podUID=5ea176c4-8a4f-49c6-a46d-f2e72616a44d Oct 2 19:26:02.820897 kubelet[1969]: I1002 19:26:02.820870 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:02.820897 kubelet[1969]: I1002 19:26:02.820902 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:26:02.822589 kubelet[1969]: I1002 19:26:02.822549 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:26:02.824691 kubelet[1969]: I1002 19:26:02.824674 1969 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681" size=101639218 Oct 2 19:26:02.825026 env[1104]: time="2023-10-02T19:26:02.824981529Z" level=info msg="RemoveImage \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Oct 2 19:26:02.826249 env[1104]: time="2023-10-02T19:26:02.826211265Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.7-0,XXX_unrecognized:[],}" Oct 2 19:26:02.827193 env[1104]: time="2023-10-02T19:26:02.827169879Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,XXX_unrecognized:[],}" Oct 2 19:26:02.828017 env[1104]: time="2023-10-02T19:26:02.827989794Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,XXX_unrecognized:[],}" Oct 2 19:26:03.086162 env[1104]: time="2023-10-02T19:26:03.086104402Z" level=info msg="RemoveImage \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\" returns successfully" Oct 2 19:26:03.086523 kubelet[1969]: I1002 19:26:03.086493 1969 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc" size=16190758 Oct 2 19:26:03.086815 env[1104]: time="2023-10-02T19:26:03.086786687Z" level=info msg="RemoveImage \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:26:03.145497 env[1104]: time="2023-10-02T19:26:03.145437327Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.10.1,XXX_unrecognized:[],}" Oct 2 19:26:03.298321 env[1104]: time="2023-10-02T19:26:03.298270758Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,XXX_unrecognized:[],}" Oct 2 19:26:03.452486 env[1104]: time="2023-10-02T19:26:03.452344343Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,XXX_unrecognized:[],}" Oct 2 19:26:04.003407 env[1104]: time="2023-10-02T19:26:04.003349437Z" level=info msg="RemoveImage \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\" returns successfully" Oct 2 19:26:04.011573 kubelet[1969]: I1002 19:26:04.011524 1969 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" size=301773 Oct 2 19:26:04.011822 env[1104]: time="2023-10-02T19:26:04.011765416Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\"" Oct 2 19:26:04.087582 env[1104]: time="2023-10-02T19:26:04.087510633Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:26:04.245385 env[1104]: time="2023-10-02T19:26:04.245319861Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:26:04.459725 env[1104]: time="2023-10-02T19:26:04.459587076Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,XXX_unrecognized:[],}" Oct 2 19:26:04.590828 env[1104]: time="2023-10-02T19:26:04.590766774Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\" returns successfully" Oct 2 19:26:04.597675 kubelet[1969]: I1002 19:26:04.597657 1969 eviction_manager.go:353] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:26:07.902364 systemd[1]: Started sshd@8-10.0.0.8:22-10.0.0.1:47772.service. Oct 2 19:26:07.903252 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:26:07.903295 kernel: audit: type=1130 audit(1696274767.901:1066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.8:22-10.0.0.1:47772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:07.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.8:22-10.0.0.1:47772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:07.938000 audit[2355]: USER_ACCT pid=2355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:07.938909 sshd[2355]: Accepted publickey for core from 10.0.0.1 port 47772 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:26:07.941000 audit[2355]: CRED_ACQ pid=2355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:07.942384 sshd[2355]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:26:07.944890 kernel: audit: type=1101 audit(1696274767.938:1067): pid=2355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:07.944953 kernel: audit: type=1103 audit(1696274767.941:1068): pid=2355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:07.944999 kernel: audit: type=1006 audit(1696274767.941:1069): pid=2355 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:26:07.945683 systemd-logind[1089]: New session 9 of user core. Oct 2 19:26:07.946411 systemd[1]: Started session-9.scope. Oct 2 19:26:07.946485 kernel: audit: type=1300 audit(1696274767.941:1069): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe00ef5c60 a2=3 a3=0 items=0 ppid=1 pid=2355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:07.941000 audit[2355]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe00ef5c60 a2=3 a3=0 items=0 ppid=1 pid=2355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:07.941000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:07.949924 kernel: audit: type=1327 audit(1696274767.941:1069): proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:07.950000 audit[2355]: USER_START pid=2355 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:07.951000 audit[2357]: CRED_ACQ pid=2357 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:07.955754 kernel: audit: type=1105 audit(1696274767.950:1070): pid=2355 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:07.955803 kernel: audit: type=1103 audit(1696274767.951:1071): pid=2357 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:08.053117 sshd[2355]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:08.053000 audit[2355]: USER_END pid=2355 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:08.054954 systemd[1]: sshd@8-10.0.0.8:22-10.0.0.1:47772.service: Deactivated successfully. Oct 2 19:26:08.055696 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:26:08.056576 systemd-logind[1089]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:26:08.053000 audit[2355]: CRED_DISP pid=2355 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:08.057256 systemd-logind[1089]: Removed session 9. Oct 2 19:26:08.058977 kernel: audit: type=1106 audit(1696274768.053:1072): pid=2355 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:08.059026 kernel: audit: type=1104 audit(1696274768.053:1073): pid=2355 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:08.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.8:22-10.0.0.1:47772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:14.594876 kubelet[1969]: E1002 19:26:14.594799 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:14.595886 kubelet[1969]: E1002 19:26:14.595806 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:14.596485 env[1104]: time="2023-10-02T19:26:14.596436476Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:26:16.777541 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2563462832.mount: Deactivated successfully. Oct 2 19:26:17.899127 env[1104]: time="2023-10-02T19:26:17.899084844Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:17.908112 env[1104]: time="2023-10-02T19:26:17.908081823Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:17.916511 env[1104]: time="2023-10-02T19:26:17.916479966Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:17.916924 env[1104]: time="2023-10-02T19:26:17.916888104Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:26:17.917808 env[1104]: time="2023-10-02T19:26:17.917772635Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:26:17.918348 env[1104]: time="2023-10-02T19:26:17.918325734Z" level=info msg="CreateContainer within sandbox \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:26:17.936263 env[1104]: time="2023-10-02T19:26:17.936218701Z" level=info msg="CreateContainer within sandbox \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\"" Oct 2 19:26:17.936699 env[1104]: time="2023-10-02T19:26:17.936675890Z" level=info msg="StartContainer for \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\"" Oct 2 19:26:17.950227 systemd[1]: Started cri-containerd-ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca.scope. Oct 2 19:26:17.963850 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:26:17.963946 kernel: audit: type=1400 audit(1696274777.960:1075): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.964001 kernel: audit: type=1400 audit(1696274777.960:1076): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.967753 kernel: audit: type=1400 audit(1696274777.960:1077): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.967791 kernel: audit: type=1400 audit(1696274777.960:1078): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.971672 kernel: audit: type=1400 audit(1696274777.960:1079): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.971700 kernel: audit: type=1400 audit(1696274777.960:1080): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.975320 kernel: audit: type=1400 audit(1696274777.960:1081): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.975351 kernel: audit: type=1400 audit(1696274777.960:1082): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.979467 kernel: audit: type=1400 audit(1696274777.960:1083): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.979510 kernel: audit: type=1400 audit(1696274777.963:1084): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit: BPF prog-id=121 op=LOAD Oct 2 19:26:17.963000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2076 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:17.963000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363633961643264353166376637666261363836613430383233333236 Oct 2 19:26:17.963000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2076 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:17.963000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363633961643264353166376637666261363836613430383233333236 Oct 2 19:26:17.963000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.963000 audit: BPF prog-id=122 op=LOAD Oct 2 19:26:17.963000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a3e90 items=0 ppid=2076 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:17.963000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363633961643264353166376637666261363836613430383233333236 Oct 2 19:26:17.965000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.965000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.965000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.965000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.965000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.965000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.965000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.965000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.965000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.965000 audit: BPF prog-id=123 op=LOAD Oct 2 19:26:17.965000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000a3ed8 items=0 ppid=2076 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:17.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363633961643264353166376637666261363836613430383233333236 Oct 2 19:26:17.967000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:26:17.967000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:26:17.967000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.967000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.967000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.967000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.967000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.967000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.967000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.967000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.967000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.967000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:17.967000 audit: BPF prog-id=124 op=LOAD Oct 2 19:26:17.967000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003b82e8 items=0 ppid=2076 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:17.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363633961643264353166376637666261363836613430383233333236 Oct 2 19:26:17.991544 env[1104]: time="2023-10-02T19:26:17.991496878Z" level=info msg="StartContainer for \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\" returns successfully" Oct 2 19:26:18.004000 audit[2385]: AVC avc: denied { map_create } for pid=2385 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c131,c315 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c131,c315 tclass=bpf permissive=0 Oct 2 19:26:18.004000 audit[2385]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0006737d0 a2=48 a3=c0006737c0 items=0 ppid=2076 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c131,c315 key=(null) Oct 2 19:26:18.004000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:26:18.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.8:22-10.0.0.1:32934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:18.058273 systemd[1]: Started sshd@9-10.0.0.8:22-10.0.0.1:32934.service. Oct 2 19:26:18.095000 audit[2406]: USER_ACCT pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:18.096482 sshd[2406]: Accepted publickey for core from 10.0.0.1 port 32934 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:26:18.096000 audit[2406]: CRED_ACQ pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:18.096000 audit[2406]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff9b6d4f0 a2=3 a3=0 items=0 ppid=1 pid=2406 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:18.096000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:18.097711 sshd[2406]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:26:18.101995 systemd[1]: Started session-10.scope. Oct 2 19:26:18.102389 systemd-logind[1089]: New session 10 of user core. Oct 2 19:26:18.109000 audit[2406]: USER_START pid=2406 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:18.110000 audit[2408]: CRED_ACQ pid=2408 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:18.229506 sshd[2406]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:18.230000 audit[2406]: USER_END pid=2406 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:18.230000 audit[2406]: CRED_DISP pid=2406 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:18.232693 systemd[1]: sshd@9-10.0.0.8:22-10.0.0.1:32934.service: Deactivated successfully. Oct 2 19:26:18.232000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.8:22-10.0.0.1:32934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:18.233733 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:26:18.234494 systemd-logind[1089]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:26:18.235826 systemd-logind[1089]: Removed session 10. Oct 2 19:26:18.673818 kubelet[1969]: E1002 19:26:18.673785 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:18.726860 kubelet[1969]: I1002 19:26:18.726813 1969 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" podStartSLOduration=2.458586552 podCreationTimestamp="2023-10-02 19:25:48 +0000 UTC" firstStartedPulling="2023-10-02 19:25:49.648944298 +0000 UTC m=+17.143723243" lastFinishedPulling="2023-10-02 19:26:17.917131019 +0000 UTC m=+45.411909964" observedRunningTime="2023-10-02 19:26:18.726750741 +0000 UTC m=+46.221529676" watchObservedRunningTime="2023-10-02 19:26:18.726773273 +0000 UTC m=+46.221552319" Oct 2 19:26:23.468848 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2580514619.mount: Deactivated successfully. Oct 2 19:26:27.239000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.255710 kernel: kauditd_printk_skb: 61 callbacks suppressed Oct 2 19:26:27.255849 kernel: audit: type=1400 audit(1696274787.239:1103): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.239000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00030ac80 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:26:27.261128 kernel: audit: type=1300 audit(1696274787.239:1103): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00030ac80 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:26:27.239000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:27.263984 kernel: audit: type=1327 audit(1696274787.239:1103): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:27.264023 kernel: audit: type=1400 audit(1696274787.239:1104): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.239000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.266362 kernel: audit: type=1300 audit(1696274787.239:1104): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000532780 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:26:27.239000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000532780 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:26:27.269371 kernel: audit: type=1327 audit(1696274787.239:1104): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:27.239000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:27.407000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.407000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.413478 kernel: audit: type=1400 audit(1696274787.407:1105): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.413543 kernel: audit: type=1400 audit(1696274787.407:1106): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.413594 kernel: audit: type=1400 audit(1696274787.407:1107): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.407000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.407000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0048c29a0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:26:27.419169 kernel: audit: type=1300 audit(1696274787.407:1106): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0048c29a0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:26:27.407000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00438cdb0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:26:27.407000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:26:27.407000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00cd17860 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:26:27.407000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:26:27.407000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:26:27.423000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6800 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.423000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.423000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:27.423000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00cd178f0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:26:27.423000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00484a720 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:26:27.423000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:26:27.423000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:26:27.423000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0097daf60 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:26:27.423000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:26:27.940190 env[1104]: time="2023-10-02T19:26:27.940145332Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:27.942318 env[1104]: time="2023-10-02T19:26:27.942269709Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:27.944106 env[1104]: time="2023-10-02T19:26:27.944080979Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:27.944651 env[1104]: time="2023-10-02T19:26:27.944621523Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:26:27.946074 env[1104]: time="2023-10-02T19:26:27.946054122Z" level=info msg="CreateContainer within sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:26:27.972780 env[1104]: time="2023-10-02T19:26:27.972724730Z" level=info msg="CreateContainer within sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936\"" Oct 2 19:26:27.973214 env[1104]: time="2023-10-02T19:26:27.973183129Z" level=info msg="StartContainer for \"76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936\"" Oct 2 19:26:27.987636 systemd[1]: Started cri-containerd-76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936.scope. Oct 2 19:26:27.994623 systemd[1]: cri-containerd-76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936.scope: Deactivated successfully. Oct 2 19:26:27.994901 systemd[1]: Stopped cri-containerd-76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936.scope. Oct 2 19:26:27.998297 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936-rootfs.mount: Deactivated successfully. Oct 2 19:26:28.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.8:22-10.0.0.1:41564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:28.232581 systemd[1]: Started sshd@10-10.0.0.8:22-10.0.0.1:41564.service. Oct 2 19:26:28.269000 audit[2448]: USER_ACCT pid=2448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:28.270216 sshd[2448]: Accepted publickey for core from 10.0.0.1 port 41564 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:26:28.270000 audit[2448]: CRED_ACQ pid=2448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:28.270000 audit[2448]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc0892950 a2=3 a3=0 items=0 ppid=1 pid=2448 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:28.270000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:28.271368 sshd[2448]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:26:28.274512 systemd-logind[1089]: New session 11 of user core. Oct 2 19:26:28.275319 systemd[1]: Started session-11.scope. Oct 2 19:26:28.277000 audit[2448]: USER_START pid=2448 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:28.278000 audit[2450]: CRED_ACQ pid=2450 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:28.419071 env[1104]: time="2023-10-02T19:26:28.418963606Z" level=info msg="shim disconnected" id=76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936 Oct 2 19:26:28.419071 env[1104]: time="2023-10-02T19:26:28.419014972Z" level=warning msg="cleaning up after shim disconnected" id=76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936 namespace=k8s.io Oct 2 19:26:28.419071 env[1104]: time="2023-10-02T19:26:28.419024289Z" level=info msg="cleaning up dead shim" Oct 2 19:26:28.419346 sshd[2448]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:28.419000 audit[2448]: USER_END pid=2448 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:28.419000 audit[2448]: CRED_DISP pid=2448 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:28.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.8:22-10.0.0.1:41564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:28.421353 systemd[1]: sshd@10-10.0.0.8:22-10.0.0.1:41564.service: Deactivated successfully. Oct 2 19:26:28.422118 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:26:28.423448 systemd-logind[1089]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:26:28.424166 systemd-logind[1089]: Removed session 11. Oct 2 19:26:28.425963 env[1104]: time="2023-10-02T19:26:28.425925662Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:26:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2461 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:26:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:26:28.426258 env[1104]: time="2023-10-02T19:26:28.426158499Z" level=error msg="copy shim log" error="read /proc/self/fd/62: file already closed" Oct 2 19:26:28.426478 env[1104]: time="2023-10-02T19:26:28.426437733Z" level=error msg="Failed to pipe stderr of container \"76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936\"" error="reading from a closed fifo" Oct 2 19:26:28.426478 env[1104]: time="2023-10-02T19:26:28.426438164Z" level=error msg="Failed to pipe stdout of container \"76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936\"" error="reading from a closed fifo" Oct 2 19:26:28.591750 env[1104]: time="2023-10-02T19:26:28.591677633Z" level=error msg="StartContainer for \"76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:26:28.591927 kubelet[1969]: E1002 19:26:28.591901 1969 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936" Oct 2 19:26:28.592168 kubelet[1969]: E1002 19:26:28.592007 1969 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:26:28.592168 kubelet[1969]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:26:28.592168 kubelet[1969]: rm /hostbin/cilium-mount Oct 2 19:26:28.592168 kubelet[1969]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xxsf7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:26:28.592168 kubelet[1969]: E1002 19:26:28.592038 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:26:28.689077 kubelet[1969]: E1002 19:26:28.689041 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:28.690743 env[1104]: time="2023-10-02T19:26:28.690703913Z" level=info msg="CreateContainer within sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:26:28.972531 env[1104]: time="2023-10-02T19:26:28.972389627Z" level=info msg="CreateContainer within sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77\"" Oct 2 19:26:28.973242 env[1104]: time="2023-10-02T19:26:28.973135116Z" level=info msg="StartContainer for \"fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77\"" Oct 2 19:26:28.988162 systemd[1]: Started cri-containerd-fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77.scope. Oct 2 19:26:28.994430 systemd[1]: cri-containerd-fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77.scope: Deactivated successfully. Oct 2 19:26:28.994675 systemd[1]: Stopped cri-containerd-fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77.scope. Oct 2 19:26:28.997464 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77-rootfs.mount: Deactivated successfully. Oct 2 19:26:29.003906 env[1104]: time="2023-10-02T19:26:29.003852134Z" level=info msg="shim disconnected" id=fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77 Oct 2 19:26:29.003906 env[1104]: time="2023-10-02T19:26:29.003903530Z" level=warning msg="cleaning up after shim disconnected" id=fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77 namespace=k8s.io Oct 2 19:26:29.004005 env[1104]: time="2023-10-02T19:26:29.003912387Z" level=info msg="cleaning up dead shim" Oct 2 19:26:29.011266 env[1104]: time="2023-10-02T19:26:29.011212066Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:26:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2498 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:26:29Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:26:29.011537 env[1104]: time="2023-10-02T19:26:29.011478767Z" level=error msg="copy shim log" error="read /proc/self/fd/62: file already closed" Oct 2 19:26:29.011744 env[1104]: time="2023-10-02T19:26:29.011693671Z" level=error msg="Failed to pipe stdout of container \"fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77\"" error="reading from a closed fifo" Oct 2 19:26:29.011887 env[1104]: time="2023-10-02T19:26:29.011837791Z" level=error msg="Failed to pipe stderr of container \"fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77\"" error="reading from a closed fifo" Oct 2 19:26:29.014176 env[1104]: time="2023-10-02T19:26:29.014137306Z" level=error msg="StartContainer for \"fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:26:29.014377 kubelet[1969]: E1002 19:26:29.014350 1969 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77" Oct 2 19:26:29.014467 kubelet[1969]: E1002 19:26:29.014453 1969 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:26:29.014467 kubelet[1969]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:26:29.014467 kubelet[1969]: rm /hostbin/cilium-mount Oct 2 19:26:29.014467 kubelet[1969]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xxsf7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:26:29.014650 kubelet[1969]: E1002 19:26:29.014487 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:26:29.692512 kubelet[1969]: I1002 19:26:29.692483 1969 scope.go:115] "RemoveContainer" containerID="76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936" Oct 2 19:26:29.692921 kubelet[1969]: I1002 19:26:29.692763 1969 scope.go:115] "RemoveContainer" containerID="76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936" Oct 2 19:26:29.699486 env[1104]: time="2023-10-02T19:26:29.699430260Z" level=info msg="RemoveContainer for \"76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936\"" Oct 2 19:26:29.700119 env[1104]: time="2023-10-02T19:26:29.700084448Z" level=info msg="RemoveContainer for \"76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936\"" Oct 2 19:26:29.700218 env[1104]: time="2023-10-02T19:26:29.700174618Z" level=error msg="RemoveContainer for \"76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936\" failed" error="failed to set removing state for container \"76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936\": container is already in removing state" Oct 2 19:26:29.700441 kubelet[1969]: E1002 19:26:29.700407 1969 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936\": container is already in removing state" containerID="76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936" Oct 2 19:26:29.700511 kubelet[1969]: E1002 19:26:29.700462 1969 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936": container is already in removing state; Skipping pod "cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)" Oct 2 19:26:29.700568 kubelet[1969]: E1002 19:26:29.700536 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:29.700866 kubelet[1969]: E1002 19:26:29.700842 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:26:29.704360 env[1104]: time="2023-10-02T19:26:29.704301883Z" level=info msg="RemoveContainer for \"76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936\" returns successfully" Oct 2 19:26:31.522879 kubelet[1969]: W1002 19:26:31.522826 1969 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podafed1df9_5b85_4fe1_8f73_4e7c8d6a65da.slice/cri-containerd-76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936.scope WatchSource:0}: container "76f4517a39e16d1a27b61eacc06921650304dba6f0087682ab9d633696ec9936" in namespace "k8s.io": not found Oct 2 19:26:34.629848 kubelet[1969]: W1002 19:26:34.629805 1969 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podafed1df9_5b85_4fe1_8f73_4e7c8d6a65da.slice/cri-containerd-fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77.scope WatchSource:0}: task fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77 not found: not found Oct 2 19:26:34.642144 kubelet[1969]: I1002 19:26:34.642115 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:34.642253 kubelet[1969]: I1002 19:26:34.642155 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:26:34.643269 kubelet[1969]: I1002 19:26:34.643252 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:26:34.693004 kubelet[1969]: I1002 19:26:34.692960 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:34.693180 kubelet[1969]: I1002 19:26:34.693047 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-proxy-jcssq kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:26:34.693180 kubelet[1969]: E1002 19:26:34.693073 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:26:34.693180 kubelet[1969]: E1002 19:26:34.693084 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:26:34.693180 kubelet[1969]: E1002 19:26:34.693093 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:26:34.693180 kubelet[1969]: E1002 19:26:34.693103 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:26:34.693180 kubelet[1969]: E1002 19:26:34.693110 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:26:34.693180 kubelet[1969]: E1002 19:26:34.693118 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:26:34.693180 kubelet[1969]: I1002 19:26:34.693127 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:26:35.785000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:35.786846 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:26:35.786903 kernel: audit: type=1400 audit(1696274795.785:1120): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:35.785000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00050bcc0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:26:35.792141 kernel: audit: type=1300 audit(1696274795.785:1120): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00050bcc0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:26:35.792194 kernel: audit: type=1327 audit(1696274795.785:1120): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:35.785000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:35.794703 kernel: audit: type=1400 audit(1696274795.785:1121): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:35.785000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:35.796940 kernel: audit: type=1300 audit(1696274795.785:1121): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cfe380 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:26:35.785000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cfe380 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:26:35.785000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:35.802479 kernel: audit: type=1327 audit(1696274795.785:1121): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:35.802509 kernel: audit: type=1400 audit(1696274795.788:1122): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:35.788000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:35.804740 kernel: audit: type=1300 audit(1696274795.788:1122): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cfe3c0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:26:35.788000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cfe3c0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:26:35.788000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:35.810490 kernel: audit: type=1327 audit(1696274795.788:1122): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:35.810531 kernel: audit: type=1400 audit(1696274795.788:1123): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:35.788000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:35.788000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cfe400 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:26:35.788000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:38.423616 systemd[1]: Started sshd@11-10.0.0.8:22-10.0.0.1:56020.service. Oct 2 19:26:38.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.8:22-10.0.0.1:56020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:38.457000 audit[2513]: USER_ACCT pid=2513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:38.459217 sshd[2513]: Accepted publickey for core from 10.0.0.1 port 56020 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:26:38.458000 audit[2513]: CRED_ACQ pid=2513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:38.458000 audit[2513]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5a385de0 a2=3 a3=0 items=0 ppid=1 pid=2513 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:38.458000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:38.460158 sshd[2513]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:26:38.463615 systemd-logind[1089]: New session 12 of user core. Oct 2 19:26:38.464607 systemd[1]: Started session-12.scope. Oct 2 19:26:38.467000 audit[2513]: USER_START pid=2513 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:38.468000 audit[2515]: CRED_ACQ pid=2515 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:38.568899 sshd[2513]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:38.568000 audit[2513]: USER_END pid=2513 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:38.568000 audit[2513]: CRED_DISP pid=2513 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:38.570868 systemd[1]: sshd@11-10.0.0.8:22-10.0.0.1:56020.service: Deactivated successfully. Oct 2 19:26:38.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.8:22-10.0.0.1:56020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:38.571709 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:26:38.572345 systemd-logind[1089]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:26:38.573032 systemd-logind[1089]: Removed session 12. Oct 2 19:26:40.594687 kubelet[1969]: E1002 19:26:40.594659 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:40.597841 env[1104]: time="2023-10-02T19:26:40.597782058Z" level=info msg="CreateContainer within sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:26:41.026262 env[1104]: time="2023-10-02T19:26:41.026074613Z" level=info msg="CreateContainer within sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530\"" Oct 2 19:26:41.026599 env[1104]: time="2023-10-02T19:26:41.026547477Z" level=info msg="StartContainer for \"08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530\"" Oct 2 19:26:41.041852 systemd[1]: Started cri-containerd-08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530.scope. Oct 2 19:26:41.047613 systemd[1]: cri-containerd-08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530.scope: Deactivated successfully. Oct 2 19:26:41.047847 systemd[1]: Stopped cri-containerd-08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530.scope. Oct 2 19:26:41.050793 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530-rootfs.mount: Deactivated successfully. Oct 2 19:26:41.190271 env[1104]: time="2023-10-02T19:26:41.190219546Z" level=info msg="shim disconnected" id=08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530 Oct 2 19:26:41.190271 env[1104]: time="2023-10-02T19:26:41.190263632Z" level=warning msg="cleaning up after shim disconnected" id=08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530 namespace=k8s.io Oct 2 19:26:41.190271 env[1104]: time="2023-10-02T19:26:41.190271897Z" level=info msg="cleaning up dead shim" Oct 2 19:26:41.196734 env[1104]: time="2023-10-02T19:26:41.196701979Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:26:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2551 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:26:41Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:26:41.196942 env[1104]: time="2023-10-02T19:26:41.196901395Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:26:41.197057 env[1104]: time="2023-10-02T19:26:41.197030073Z" level=error msg="Failed to pipe stdout of container \"08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530\"" error="reading from a closed fifo" Oct 2 19:26:41.197113 env[1104]: time="2023-10-02T19:26:41.197080912Z" level=error msg="Failed to pipe stderr of container \"08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530\"" error="reading from a closed fifo" Oct 2 19:26:41.406971 env[1104]: time="2023-10-02T19:26:41.406884331Z" level=error msg="StartContainer for \"08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:26:41.407194 kubelet[1969]: E1002 19:26:41.407171 1969 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530" Oct 2 19:26:41.407304 kubelet[1969]: E1002 19:26:41.407289 1969 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:26:41.407304 kubelet[1969]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:26:41.407304 kubelet[1969]: rm /hostbin/cilium-mount Oct 2 19:26:41.407304 kubelet[1969]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xxsf7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:26:41.407440 kubelet[1969]: E1002 19:26:41.407332 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:26:41.714858 kubelet[1969]: I1002 19:26:41.714315 1969 scope.go:115] "RemoveContainer" containerID="fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77" Oct 2 19:26:41.714858 kubelet[1969]: I1002 19:26:41.714623 1969 scope.go:115] "RemoveContainer" containerID="fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77" Oct 2 19:26:41.716176 env[1104]: time="2023-10-02T19:26:41.716142683Z" level=info msg="RemoveContainer for \"fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77\"" Oct 2 19:26:41.716988 env[1104]: time="2023-10-02T19:26:41.716950663Z" level=info msg="RemoveContainer for \"fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77\"" Oct 2 19:26:41.717084 env[1104]: time="2023-10-02T19:26:41.717050256Z" level=error msg="RemoveContainer for \"fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77\" failed" error="failed to set removing state for container \"fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77\": container is already in removing state" Oct 2 19:26:41.717207 kubelet[1969]: E1002 19:26:41.717191 1969 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77\": container is already in removing state" containerID="fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77" Oct 2 19:26:41.717286 kubelet[1969]: E1002 19:26:41.717220 1969 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77": container is already in removing state; Skipping pod "cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)" Oct 2 19:26:41.717326 kubelet[1969]: E1002 19:26:41.717285 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:41.717545 kubelet[1969]: E1002 19:26:41.717525 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:26:41.812370 env[1104]: time="2023-10-02T19:26:41.812325102Z" level=info msg="RemoveContainer for \"fd00655149f35f41a88a14bf94cbdd5b012129866c365b42c088a6eb777e8a77\" returns successfully" Oct 2 19:26:44.295157 kubelet[1969]: W1002 19:26:44.295120 1969 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podafed1df9_5b85_4fe1_8f73_4e7c8d6a65da.slice/cri-containerd-08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530.scope WatchSource:0}: task 08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530 not found: not found Oct 2 19:26:44.707595 kubelet[1969]: I1002 19:26:44.707567 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:44.707595 kubelet[1969]: I1002 19:26:44.707599 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:26:44.708493 kubelet[1969]: I1002 19:26:44.708478 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:26:44.717052 kubelet[1969]: I1002 19:26:44.717038 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:44.717129 kubelet[1969]: I1002 19:26:44.717104 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-proxy-jcssq kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:26:44.717129 kubelet[1969]: E1002 19:26:44.717125 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:26:44.717178 kubelet[1969]: E1002 19:26:44.717136 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:26:44.717178 kubelet[1969]: E1002 19:26:44.717143 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:26:44.717178 kubelet[1969]: E1002 19:26:44.717153 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:26:44.717178 kubelet[1969]: E1002 19:26:44.717160 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:26:44.717178 kubelet[1969]: E1002 19:26:44.717167 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:26:44.717178 kubelet[1969]: I1002 19:26:44.717176 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:26:48.573379 systemd[1]: Started sshd@12-10.0.0.8:22-10.0.0.1:36894.service. Oct 2 19:26:48.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.8:22-10.0.0.1:36894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:48.576456 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:26:48.576515 kernel: audit: type=1130 audit(1696274808.572:1133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.8:22-10.0.0.1:36894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:48.627000 audit[2564]: USER_ACCT pid=2564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:48.628550 sshd[2564]: Accepted publickey for core from 10.0.0.1 port 36894 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:26:48.632000 audit[2564]: CRED_ACQ pid=2564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:48.633137 sshd[2564]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:26:48.635544 kernel: audit: type=1101 audit(1696274808.627:1134): pid=2564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:48.635702 kernel: audit: type=1103 audit(1696274808.632:1135): pid=2564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:48.635735 kernel: audit: type=1006 audit(1696274808.632:1136): pid=2564 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:26:48.632000 audit[2564]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4ac3e7f0 a2=3 a3=0 items=0 ppid=1 pid=2564 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:48.637251 systemd-logind[1089]: New session 13 of user core. Oct 2 19:26:48.637933 systemd[1]: Started session-13.scope. Oct 2 19:26:48.639403 kernel: audit: type=1300 audit(1696274808.632:1136): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4ac3e7f0 a2=3 a3=0 items=0 ppid=1 pid=2564 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:48.639443 kernel: audit: type=1327 audit(1696274808.632:1136): proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:48.632000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:48.641000 audit[2564]: USER_START pid=2564 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:48.642000 audit[2566]: CRED_ACQ pid=2566 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:48.647027 kernel: audit: type=1105 audit(1696274808.641:1137): pid=2564 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:48.647069 kernel: audit: type=1103 audit(1696274808.642:1138): pid=2566 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:48.746990 sshd[2564]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:48.747000 audit[2564]: USER_END pid=2564 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:48.749208 systemd[1]: sshd@12-10.0.0.8:22-10.0.0.1:36894.service: Deactivated successfully. Oct 2 19:26:48.750068 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:26:48.751121 systemd-logind[1089]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:26:48.747000 audit[2564]: CRED_DISP pid=2564 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:48.752089 systemd-logind[1089]: Removed session 13. Oct 2 19:26:48.753909 kernel: audit: type=1106 audit(1696274808.747:1139): pid=2564 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:48.753963 kernel: audit: type=1104 audit(1696274808.747:1140): pid=2564 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:48.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.8:22-10.0.0.1:36894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:54.728763 kubelet[1969]: I1002 19:26:54.728737 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:54.728763 kubelet[1969]: I1002 19:26:54.728764 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:26:54.729904 kubelet[1969]: I1002 19:26:54.729894 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:26:54.737762 kubelet[1969]: I1002 19:26:54.737745 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:26:54.737830 kubelet[1969]: I1002 19:26:54.737799 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-proxy-jcssq kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:26:54.737830 kubelet[1969]: E1002 19:26:54.737818 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:26:54.737830 kubelet[1969]: E1002 19:26:54.737826 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:26:54.737903 kubelet[1969]: E1002 19:26:54.737835 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:26:54.737903 kubelet[1969]: E1002 19:26:54.737843 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:26:54.737903 kubelet[1969]: E1002 19:26:54.737851 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:26:54.737903 kubelet[1969]: E1002 19:26:54.737858 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:26:54.737903 kubelet[1969]: I1002 19:26:54.737867 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:26:55.593950 kubelet[1969]: E1002 19:26:55.593924 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:26:55.594161 kubelet[1969]: E1002 19:26:55.594140 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:26:58.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.8:22-10.0.0.1:42936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:58.751822 systemd[1]: Started sshd@13-10.0.0.8:22-10.0.0.1:42936.service. Oct 2 19:26:58.752639 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:26:58.752681 kernel: audit: type=1130 audit(1696274818.750:1142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.8:22-10.0.0.1:42936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:58.784000 audit[2581]: USER_ACCT pid=2581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:58.786701 sshd[2581]: Accepted publickey for core from 10.0.0.1 port 42936 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:26:58.788185 sshd[2581]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:26:58.786000 audit[2581]: CRED_ACQ pid=2581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:58.791549 kernel: audit: type=1101 audit(1696274818.784:1143): pid=2581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:58.791618 kernel: audit: type=1103 audit(1696274818.786:1144): pid=2581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:58.791637 kernel: audit: type=1006 audit(1696274818.786:1145): pid=2581 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:26:58.791273 systemd-logind[1089]: New session 14 of user core. Oct 2 19:26:58.791987 systemd[1]: Started session-14.scope. Oct 2 19:26:58.786000 audit[2581]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe0fd6c690 a2=3 a3=0 items=0 ppid=1 pid=2581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:58.796464 kernel: audit: type=1300 audit(1696274818.786:1145): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe0fd6c690 a2=3 a3=0 items=0 ppid=1 pid=2581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:58.796523 kernel: audit: type=1327 audit(1696274818.786:1145): proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:58.786000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:58.794000 audit[2581]: USER_START pid=2581 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:58.800197 kernel: audit: type=1105 audit(1696274818.794:1146): pid=2581 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:58.800244 kernel: audit: type=1103 audit(1696274818.795:1147): pid=2583 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:58.795000 audit[2583]: CRED_ACQ pid=2583 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:58.906818 sshd[2581]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:58.906000 audit[2581]: USER_END pid=2581 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:58.909464 systemd[1]: sshd@13-10.0.0.8:22-10.0.0.1:42936.service: Deactivated successfully. Oct 2 19:26:58.910139 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:26:58.906000 audit[2581]: CRED_DISP pid=2581 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:58.912751 kernel: audit: type=1106 audit(1696274818.906:1148): pid=2581 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:58.912818 kernel: audit: type=1104 audit(1696274818.906:1149): pid=2581 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:26:58.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.8:22-10.0.0.1:42936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:58.913170 systemd-logind[1089]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:26:58.913807 systemd-logind[1089]: Removed session 14. Oct 2 19:27:03.594575 kubelet[1969]: E1002 19:27:03.594540 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:04.749223 kubelet[1969]: I1002 19:27:04.749183 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:04.749223 kubelet[1969]: I1002 19:27:04.749216 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:27:04.750738 kubelet[1969]: I1002 19:27:04.750718 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:27:04.760053 kubelet[1969]: I1002 19:27:04.760033 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:04.760174 kubelet[1969]: I1002 19:27:04.760106 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-proxy-jcssq kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:27:04.760174 kubelet[1969]: E1002 19:27:04.760128 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:27:04.760174 kubelet[1969]: E1002 19:27:04.760138 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:27:04.760174 kubelet[1969]: E1002 19:27:04.760148 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:27:04.760174 kubelet[1969]: E1002 19:27:04.760155 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:27:04.760174 kubelet[1969]: E1002 19:27:04.760162 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:27:04.760174 kubelet[1969]: E1002 19:27:04.760170 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:27:04.760328 kubelet[1969]: I1002 19:27:04.760179 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:27:07.595375 kubelet[1969]: E1002 19:27:07.595344 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:07.595953 kubelet[1969]: E1002 19:27:07.595470 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:08.594124 kubelet[1969]: E1002 19:27:08.594082 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:08.596255 env[1104]: time="2023-10-02T19:27:08.596211000Z" level=info msg="CreateContainer within sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:27:08.605669 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2928849854.mount: Deactivated successfully. Oct 2 19:27:08.607392 env[1104]: time="2023-10-02T19:27:08.607340894Z" level=info msg="CreateContainer within sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54\"" Oct 2 19:27:08.607777 env[1104]: time="2023-10-02T19:27:08.607739513Z" level=info msg="StartContainer for \"37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54\"" Oct 2 19:27:08.621847 systemd[1]: Started cri-containerd-37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54.scope. Oct 2 19:27:08.630313 systemd[1]: cri-containerd-37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54.scope: Deactivated successfully. Oct 2 19:27:08.630584 systemd[1]: Stopped cri-containerd-37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54.scope. Oct 2 19:27:08.633979 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54-rootfs.mount: Deactivated successfully. Oct 2 19:27:08.640852 env[1104]: time="2023-10-02T19:27:08.640811140Z" level=info msg="shim disconnected" id=37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54 Oct 2 19:27:08.640959 env[1104]: time="2023-10-02T19:27:08.640856818Z" level=warning msg="cleaning up after shim disconnected" id=37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54 namespace=k8s.io Oct 2 19:27:08.640959 env[1104]: time="2023-10-02T19:27:08.640865384Z" level=info msg="cleaning up dead shim" Oct 2 19:27:08.646381 env[1104]: time="2023-10-02T19:27:08.646339894Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:27:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2618 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:27:08Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:27:08.646708 env[1104]: time="2023-10-02T19:27:08.646657188Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:27:08.646896 env[1104]: time="2023-10-02T19:27:08.646850857Z" level=error msg="Failed to pipe stderr of container \"37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54\"" error="reading from a closed fifo" Oct 2 19:27:08.646944 env[1104]: time="2023-10-02T19:27:08.646843613Z" level=error msg="Failed to pipe stdout of container \"37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54\"" error="reading from a closed fifo" Oct 2 19:27:08.649138 env[1104]: time="2023-10-02T19:27:08.649088706Z" level=error msg="StartContainer for \"37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:27:08.649331 kubelet[1969]: E1002 19:27:08.649305 1969 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54" Oct 2 19:27:08.649698 kubelet[1969]: E1002 19:27:08.649411 1969 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:27:08.649698 kubelet[1969]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:27:08.649698 kubelet[1969]: rm /hostbin/cilium-mount Oct 2 19:27:08.649698 kubelet[1969]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xxsf7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:27:08.649698 kubelet[1969]: E1002 19:27:08.649447 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:27:08.754610 kubelet[1969]: I1002 19:27:08.754582 1969 scope.go:115] "RemoveContainer" containerID="08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530" Oct 2 19:27:08.754834 kubelet[1969]: I1002 19:27:08.754815 1969 scope.go:115] "RemoveContainer" containerID="08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530" Oct 2 19:27:08.755776 env[1104]: time="2023-10-02T19:27:08.755743379Z" level=info msg="RemoveContainer for \"08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530\"" Oct 2 19:27:08.756047 env[1104]: time="2023-10-02T19:27:08.756017421Z" level=info msg="RemoveContainer for \"08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530\"" Oct 2 19:27:08.756219 env[1104]: time="2023-10-02T19:27:08.756087975Z" level=error msg="RemoveContainer for \"08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530\" failed" error="failed to set removing state for container \"08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530\": container is already in removing state" Oct 2 19:27:08.756314 kubelet[1969]: E1002 19:27:08.756293 1969 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530\": container is already in removing state" containerID="08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530" Oct 2 19:27:08.756377 kubelet[1969]: E1002 19:27:08.756325 1969 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530": container is already in removing state; Skipping pod "cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)" Oct 2 19:27:08.756407 kubelet[1969]: E1002 19:27:08.756380 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:08.756615 kubelet[1969]: E1002 19:27:08.756599 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:27:08.759354 env[1104]: time="2023-10-02T19:27:08.759319106Z" level=info msg="RemoveContainer for \"08bd16fad4d8123eb01328bb02ad64adc2fb648307542514aa0d054b67eaa530\" returns successfully" Oct 2 19:27:08.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.8:22-10.0.0.1:42286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:08.910844 systemd[1]: Started sshd@14-10.0.0.8:22-10.0.0.1:42286.service. Oct 2 19:27:08.912352 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:27:08.912424 kernel: audit: type=1130 audit(1696274828.909:1151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.8:22-10.0.0.1:42286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:08.949000 audit[2632]: USER_ACCT pid=2632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:08.951175 sshd[2632]: Accepted publickey for core from 10.0.0.1 port 42286 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:08.952752 sshd[2632]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:08.950000 audit[2632]: CRED_ACQ pid=2632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:08.960915 kernel: audit: type=1101 audit(1696274828.949:1152): pid=2632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:08.960973 kernel: audit: type=1103 audit(1696274828.950:1153): pid=2632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:08.960995 kernel: audit: type=1006 audit(1696274828.950:1154): pid=2632 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:27:08.961014 kernel: audit: type=1300 audit(1696274828.950:1154): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffccb181210 a2=3 a3=0 items=0 ppid=1 pid=2632 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:08.961048 kernel: audit: type=1327 audit(1696274828.950:1154): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:08.950000 audit[2632]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffccb181210 a2=3 a3=0 items=0 ppid=1 pid=2632 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:08.950000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:08.957023 systemd[1]: Started session-15.scope. Oct 2 19:27:08.957282 systemd-logind[1089]: New session 15 of user core. Oct 2 19:27:08.960000 audit[2632]: USER_START pid=2632 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:08.961000 audit[2634]: CRED_ACQ pid=2634 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:08.967304 kernel: audit: type=1105 audit(1696274828.960:1155): pid=2632 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:08.967337 kernel: audit: type=1103 audit(1696274828.961:1156): pid=2634 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:09.058648 sshd[2632]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:09.057000 audit[2632]: USER_END pid=2632 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:09.060566 systemd[1]: sshd@14-10.0.0.8:22-10.0.0.1:42286.service: Deactivated successfully. Oct 2 19:27:09.061157 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:27:09.061613 systemd-logind[1089]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:27:09.062208 systemd-logind[1089]: Removed session 15. Oct 2 19:27:09.057000 audit[2632]: CRED_DISP pid=2632 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:09.064654 kernel: audit: type=1106 audit(1696274829.057:1157): pid=2632 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:09.064692 kernel: audit: type=1104 audit(1696274829.057:1158): pid=2632 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:09.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.8:22-10.0.0.1:42286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:11.744426 kubelet[1969]: W1002 19:27:11.744387 1969 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podafed1df9_5b85_4fe1_8f73_4e7c8d6a65da.slice/cri-containerd-37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54.scope WatchSource:0}: task 37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54 not found: not found Oct 2 19:27:14.594640 kubelet[1969]: E1002 19:27:14.594594 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:14.769948 kubelet[1969]: I1002 19:27:14.769912 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:14.769948 kubelet[1969]: I1002 19:27:14.769939 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:27:14.770856 kubelet[1969]: I1002 19:27:14.770843 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:27:14.778790 kubelet[1969]: I1002 19:27:14.778766 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:14.778874 kubelet[1969]: I1002 19:27:14.778854 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-proxy-jcssq kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:27:14.778913 kubelet[1969]: E1002 19:27:14.778882 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:27:14.778913 kubelet[1969]: E1002 19:27:14.778897 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:27:14.778913 kubelet[1969]: E1002 19:27:14.778908 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:27:14.778979 kubelet[1969]: E1002 19:27:14.778919 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:27:14.778979 kubelet[1969]: E1002 19:27:14.778930 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:27:14.778979 kubelet[1969]: E1002 19:27:14.778940 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:27:14.778979 kubelet[1969]: I1002 19:27:14.778953 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:27:19.062999 systemd[1]: Started sshd@15-10.0.0.8:22-10.0.0.1:58988.service. Oct 2 19:27:19.063981 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:27:19.064008 kernel: audit: type=1130 audit(1696274839.062:1160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.8:22-10.0.0.1:58988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:19.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.8:22-10.0.0.1:58988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:19.096000 audit[2646]: USER_ACCT pid=2646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:19.097677 sshd[2646]: Accepted publickey for core from 10.0.0.1 port 58988 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:19.099000 audit[2646]: CRED_ACQ pid=2646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:19.100285 sshd[2646]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:19.102342 kernel: audit: type=1101 audit(1696274839.096:1161): pid=2646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:19.102398 kernel: audit: type=1103 audit(1696274839.099:1162): pid=2646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:19.102425 kernel: audit: type=1006 audit(1696274839.099:1163): pid=2646 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:27:19.103872 kernel: audit: type=1300 audit(1696274839.099:1163): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe94249410 a2=3 a3=0 items=0 ppid=1 pid=2646 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:19.099000 audit[2646]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe94249410 a2=3 a3=0 items=0 ppid=1 pid=2646 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:19.103580 systemd-logind[1089]: New session 16 of user core. Oct 2 19:27:19.104291 systemd[1]: Started session-16.scope. Oct 2 19:27:19.106255 kernel: audit: type=1327 audit(1696274839.099:1163): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:19.099000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:19.107000 audit[2646]: USER_START pid=2646 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:19.108000 audit[2648]: CRED_ACQ pid=2648 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:19.112706 kernel: audit: type=1105 audit(1696274839.107:1164): pid=2646 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:19.112745 kernel: audit: type=1103 audit(1696274839.108:1165): pid=2648 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:19.207229 sshd[2646]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:19.207000 audit[2646]: USER_END pid=2646 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:19.209436 systemd[1]: sshd@15-10.0.0.8:22-10.0.0.1:58988.service: Deactivated successfully. Oct 2 19:27:19.210093 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:27:19.207000 audit[2646]: CRED_DISP pid=2646 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:19.213106 kernel: audit: type=1106 audit(1696274839.207:1166): pid=2646 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:19.213177 kernel: audit: type=1104 audit(1696274839.207:1167): pid=2646 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:19.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.8:22-10.0.0.1:58988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:19.213540 systemd-logind[1089]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:27:19.214150 systemd-logind[1089]: Removed session 16. Oct 2 19:27:23.594790 kubelet[1969]: E1002 19:27:23.594740 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:23.595123 kubelet[1969]: E1002 19:27:23.594972 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:27:24.594348 kubelet[1969]: E1002 19:27:24.594324 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:24.788021 kubelet[1969]: I1002 19:27:24.787995 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:24.788021 kubelet[1969]: I1002 19:27:24.788021 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:27:24.789127 kubelet[1969]: I1002 19:27:24.789110 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:27:24.796272 kubelet[1969]: I1002 19:27:24.796256 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:24.796361 kubelet[1969]: I1002 19:27:24.796338 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-proxy-jcssq kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:27:24.796361 kubelet[1969]: E1002 19:27:24.796353 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:27:24.796406 kubelet[1969]: E1002 19:27:24.796363 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:27:24.796406 kubelet[1969]: E1002 19:27:24.796371 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:27:24.796406 kubelet[1969]: E1002 19:27:24.796378 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:27:24.796406 kubelet[1969]: E1002 19:27:24.796385 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:27:24.796406 kubelet[1969]: E1002 19:27:24.796392 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:27:24.796406 kubelet[1969]: I1002 19:27:24.796402 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:27:27.239000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.240971 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:27:27.241015 kernel: audit: type=1400 audit(1696274847.239:1169): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.239000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.247277 kernel: audit: type=1400 audit(1696274847.239:1170): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.247322 kernel: audit: type=1300 audit(1696274847.239:1169): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00252b8e0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:27:27.239000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00252b8e0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:27:27.239000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001e66a20 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:27:27.255426 kernel: audit: type=1300 audit(1696274847.239:1170): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001e66a20 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:27:27.255475 kernel: audit: type=1327 audit(1696274847.239:1169): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:27.239000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:27.239000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:27.262195 kernel: audit: type=1327 audit(1696274847.239:1170): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:27.424000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.424000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6800 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.429890 kernel: audit: type=1400 audit(1696274847.424:1172): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.429926 kernel: audit: type=1400 audit(1696274847.424:1171): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6800 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.429943 kernel: audit: type=1300 audit(1696274847.424:1171): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00af475c0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:27:27.424000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00af475c0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:27:27.424000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=48 a1=c00add0b70 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:27:27.436475 kernel: audit: type=1300 audit(1696274847.424:1172): arch=c000003e syscall=254 success=no exit=-13 a0=48 a1=c00add0b70 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:27:27.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:27:27.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:27:27.424000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.424000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00db47080 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:27:27.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:27:27.424000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.424000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00af475f0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:27:27.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:27:27.424000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.424000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=48 a1=c00dc99a20 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:27:27.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:27:27.424000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:27.424000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=48 a1=c00b1883c0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:27:27.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:27:29.211457 systemd[1]: Started sshd@16-10.0.0.8:22-10.0.0.1:58766.service. Oct 2 19:27:29.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.8:22-10.0.0.1:58766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:29.246000 audit[2662]: USER_ACCT pid=2662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:29.247075 sshd[2662]: Accepted publickey for core from 10.0.0.1 port 58766 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:29.247000 audit[2662]: CRED_ACQ pid=2662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:29.247000 audit[2662]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed8d1e2a0 a2=3 a3=0 items=0 ppid=1 pid=2662 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:29.247000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:29.247860 sshd[2662]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:29.250950 systemd-logind[1089]: New session 17 of user core. Oct 2 19:27:29.251890 systemd[1]: Started session-17.scope. Oct 2 19:27:29.255000 audit[2662]: USER_START pid=2662 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:29.256000 audit[2664]: CRED_ACQ pid=2664 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:29.357092 sshd[2662]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:29.358000 audit[2662]: USER_END pid=2662 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:29.358000 audit[2662]: CRED_DISP pid=2662 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:29.360247 systemd[1]: sshd@16-10.0.0.8:22-10.0.0.1:58766.service: Deactivated successfully. Oct 2 19:27:29.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.8:22-10.0.0.1:58766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:29.360859 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:27:29.361364 systemd-logind[1089]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:27:29.362596 systemd[1]: Started sshd@17-10.0.0.8:22-10.0.0.1:58772.service. Oct 2 19:27:29.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.8:22-10.0.0.1:58772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:29.363337 systemd-logind[1089]: Removed session 17. Oct 2 19:27:29.396000 audit[2676]: USER_ACCT pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:29.397588 sshd[2676]: Accepted publickey for core from 10.0.0.1 port 58772 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:29.397000 audit[2676]: CRED_ACQ pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:29.397000 audit[2676]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0e4836e0 a2=3 a3=0 items=0 ppid=1 pid=2676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:29.397000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:29.398710 sshd[2676]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:29.401630 systemd-logind[1089]: New session 18 of user core. Oct 2 19:27:29.402403 systemd[1]: Started session-18.scope. Oct 2 19:27:29.405000 audit[2676]: USER_START pid=2676 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:29.406000 audit[2678]: CRED_ACQ pid=2678 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:30.066035 sshd[2676]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:30.066000 audit[2676]: USER_END pid=2676 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:30.066000 audit[2676]: CRED_DISP pid=2676 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:30.068837 systemd[1]: sshd@17-10.0.0.8:22-10.0.0.1:58772.service: Deactivated successfully. Oct 2 19:27:30.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.8:22-10.0.0.1:58772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:30.069455 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:27:30.070050 systemd-logind[1089]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:27:30.071168 systemd[1]: Started sshd@18-10.0.0.8:22-10.0.0.1:58776.service. Oct 2 19:27:30.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.8:22-10.0.0.1:58776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:30.072325 systemd-logind[1089]: Removed session 18. Oct 2 19:27:30.115000 audit[2687]: USER_ACCT pid=2687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:30.116084 sshd[2687]: Accepted publickey for core from 10.0.0.1 port 58776 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:30.116000 audit[2687]: CRED_ACQ pid=2687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:30.116000 audit[2687]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed911f870 a2=3 a3=0 items=0 ppid=1 pid=2687 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:30.116000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:30.117073 sshd[2687]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:30.120621 systemd-logind[1089]: New session 19 of user core. Oct 2 19:27:30.121316 systemd[1]: Started session-19.scope. Oct 2 19:27:30.125000 audit[2687]: USER_START pid=2687 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:30.126000 audit[2689]: CRED_ACQ pid=2689 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:30.226966 sshd[2687]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:30.227000 audit[2687]: USER_END pid=2687 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:30.227000 audit[2687]: CRED_DISP pid=2687 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:30.229266 systemd[1]: sshd@18-10.0.0.8:22-10.0.0.1:58776.service: Deactivated successfully. Oct 2 19:27:30.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.8:22-10.0.0.1:58776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:30.229966 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:27:30.230491 systemd-logind[1089]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:27:30.231108 systemd-logind[1089]: Removed session 19. Oct 2 19:27:32.624948 kubelet[1969]: E1002 19:27:32.624898 1969 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:27:32.660980 kubelet[1969]: E1002 19:27:32.660961 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:27:34.808702 kubelet[1969]: I1002 19:27:34.808668 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:34.808702 kubelet[1969]: I1002 19:27:34.808706 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:27:34.810020 kubelet[1969]: I1002 19:27:34.809991 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:27:34.818755 kubelet[1969]: I1002 19:27:34.818730 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:34.818939 kubelet[1969]: I1002 19:27:34.818792 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-proxy-jcssq kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:27:34.818939 kubelet[1969]: E1002 19:27:34.818812 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:27:34.818939 kubelet[1969]: E1002 19:27:34.818822 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:27:34.818939 kubelet[1969]: E1002 19:27:34.818831 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:27:34.818939 kubelet[1969]: E1002 19:27:34.818840 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:27:34.818939 kubelet[1969]: E1002 19:27:34.818847 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:27:34.818939 kubelet[1969]: E1002 19:27:34.818854 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:27:34.818939 kubelet[1969]: I1002 19:27:34.818863 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:27:35.786000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:35.787714 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 2 19:27:35.787788 kernel: audit: type=1400 audit(1696274855.786:1204): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:35.786000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002790e60 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:27:35.794359 kernel: audit: type=1300 audit(1696274855.786:1204): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002790e60 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:27:35.794428 kernel: audit: type=1327 audit(1696274855.786:1204): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:35.786000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:35.786000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:35.800340 kernel: audit: type=1400 audit(1696274855.786:1205): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:35.800401 kernel: audit: type=1300 audit(1696274855.786:1205): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00224b000 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:27:35.786000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00224b000 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:27:35.786000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:35.807240 kernel: audit: type=1327 audit(1696274855.786:1205): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:35.807302 kernel: audit: type=1400 audit(1696274855.788:1206): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:35.788000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:35.788000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002790e80 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:27:35.812719 kernel: audit: type=1300 audit(1696274855.788:1206): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002790e80 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:27:35.812766 kernel: audit: type=1327 audit(1696274855.788:1206): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:35.788000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:35.815304 kernel: audit: type=1400 audit(1696274855.789:1207): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:35.789000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:35.789000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0029b52a0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:27:35.789000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:37.662441 kubelet[1969]: E1002 19:27:37.662401 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:27:38.594150 kubelet[1969]: E1002 19:27:38.594121 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:38.594338 kubelet[1969]: E1002 19:27:38.594314 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:27:40.231124 systemd[1]: Started sshd@19-10.0.0.8:22-10.0.0.1:45600.service. Oct 2 19:27:40.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.8:22-10.0.0.1:45600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:40.263000 audit[2702]: USER_ACCT pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:40.265565 sshd[2702]: Accepted publickey for core from 10.0.0.1 port 45600 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:40.264000 audit[2702]: CRED_ACQ pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:40.264000 audit[2702]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc71aa3ba0 a2=3 a3=0 items=0 ppid=1 pid=2702 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:40.264000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:40.266337 sshd[2702]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:40.269115 systemd-logind[1089]: New session 20 of user core. Oct 2 19:27:40.270023 systemd[1]: Started session-20.scope. Oct 2 19:27:40.271000 audit[2702]: USER_START pid=2702 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:40.272000 audit[2704]: CRED_ACQ pid=2704 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:40.366606 sshd[2702]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:40.365000 audit[2702]: USER_END pid=2702 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:40.365000 audit[2702]: CRED_DISP pid=2702 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:40.368488 systemd[1]: sshd@19-10.0.0.8:22-10.0.0.1:45600.service: Deactivated successfully. Oct 2 19:27:40.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.8:22-10.0.0.1:45600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:40.369091 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:27:40.369518 systemd-logind[1089]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:27:40.370131 systemd-logind[1089]: Removed session 20. Oct 2 19:27:42.663583 kubelet[1969]: E1002 19:27:42.663542 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:27:44.829090 kubelet[1969]: I1002 19:27:44.829063 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:44.829090 kubelet[1969]: I1002 19:27:44.829092 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:27:44.830114 kubelet[1969]: I1002 19:27:44.830101 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:27:44.839034 kubelet[1969]: I1002 19:27:44.839002 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:44.839206 kubelet[1969]: I1002 19:27:44.839088 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-controller-manager-localhost kube-system/kube-proxy-jcssq kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:27:44.839206 kubelet[1969]: E1002 19:27:44.839108 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:27:44.839206 kubelet[1969]: E1002 19:27:44.839120 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:27:44.839206 kubelet[1969]: E1002 19:27:44.839128 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:27:44.839206 kubelet[1969]: E1002 19:27:44.839136 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:27:44.839206 kubelet[1969]: E1002 19:27:44.839144 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:27:44.839206 kubelet[1969]: E1002 19:27:44.839152 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:27:44.839206 kubelet[1969]: I1002 19:27:44.839161 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:27:47.664611 kubelet[1969]: E1002 19:27:47.664551 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:27:50.370594 systemd[1]: Started sshd@20-10.0.0.8:22-10.0.0.1:39418.service. Oct 2 19:27:50.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.8:22-10.0.0.1:39418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:50.373575 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:27:50.373628 kernel: audit: type=1130 audit(1696274870.369:1217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.8:22-10.0.0.1:39418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:50.403000 audit[2717]: USER_ACCT pid=2717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:50.405291 sshd[2717]: Accepted publickey for core from 10.0.0.1 port 39418 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:27:50.407030 sshd[2717]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:50.405000 audit[2717]: CRED_ACQ pid=2717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:50.410269 systemd-logind[1089]: New session 21 of user core. Oct 2 19:27:50.410892 kernel: audit: type=1101 audit(1696274870.403:1218): pid=2717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:50.410944 kernel: audit: type=1103 audit(1696274870.405:1219): pid=2717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:50.410977 kernel: audit: type=1006 audit(1696274870.405:1220): pid=2717 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:27:50.411228 systemd[1]: Started session-21.scope. Oct 2 19:27:50.405000 audit[2717]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3e34a160 a2=3 a3=0 items=0 ppid=1 pid=2717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:50.415960 kernel: audit: type=1300 audit(1696274870.405:1220): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3e34a160 a2=3 a3=0 items=0 ppid=1 pid=2717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:50.416014 kernel: audit: type=1327 audit(1696274870.405:1220): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:50.405000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:50.414000 audit[2717]: USER_START pid=2717 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:50.419923 kernel: audit: type=1105 audit(1696274870.414:1221): pid=2717 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:50.419964 kernel: audit: type=1103 audit(1696274870.415:1222): pid=2719 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:50.415000 audit[2719]: CRED_ACQ pid=2719 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:50.508642 sshd[2717]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:50.507000 audit[2717]: USER_END pid=2717 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:50.510773 systemd[1]: sshd@20-10.0.0.8:22-10.0.0.1:39418.service: Deactivated successfully. Oct 2 19:27:50.511593 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:27:50.512172 systemd-logind[1089]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:27:50.508000 audit[2717]: CRED_DISP pid=2717 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:50.512857 systemd-logind[1089]: Removed session 21. Oct 2 19:27:50.515070 kernel: audit: type=1106 audit(1696274870.507:1223): pid=2717 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:50.515116 kernel: audit: type=1104 audit(1696274870.508:1224): pid=2717 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:27:50.509000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.8:22-10.0.0.1:39418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:52.594453 kubelet[1969]: E1002 19:27:52.594424 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:52.596062 env[1104]: time="2023-10-02T19:27:52.596020046Z" level=info msg="CreateContainer within sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:27:52.607904 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1690402696.mount: Deactivated successfully. Oct 2 19:27:52.609871 env[1104]: time="2023-10-02T19:27:52.609836396Z" level=info msg="CreateContainer within sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0\"" Oct 2 19:27:52.610230 env[1104]: time="2023-10-02T19:27:52.610205983Z" level=info msg="StartContainer for \"6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0\"" Oct 2 19:27:52.625525 systemd[1]: run-containerd-runc-k8s.io-6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0-runc.wYj5EJ.mount: Deactivated successfully. Oct 2 19:27:52.626697 systemd[1]: Started cri-containerd-6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0.scope. Oct 2 19:27:52.635903 systemd[1]: cri-containerd-6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0.scope: Deactivated successfully. Oct 2 19:27:52.636179 systemd[1]: Stopped cri-containerd-6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0.scope. Oct 2 19:27:52.648111 env[1104]: time="2023-10-02T19:27:52.648055537Z" level=info msg="shim disconnected" id=6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0 Oct 2 19:27:52.648111 env[1104]: time="2023-10-02T19:27:52.648099339Z" level=warning msg="cleaning up after shim disconnected" id=6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0 namespace=k8s.io Oct 2 19:27:52.648111 env[1104]: time="2023-10-02T19:27:52.648107525Z" level=info msg="cleaning up dead shim" Oct 2 19:27:52.654345 env[1104]: time="2023-10-02T19:27:52.654301346Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:27:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2752 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:27:52Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:27:52.654758 env[1104]: time="2023-10-02T19:27:52.654710529Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:27:52.654915 env[1104]: time="2023-10-02T19:27:52.654866703Z" level=error msg="Failed to pipe stderr of container \"6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0\"" error="reading from a closed fifo" Oct 2 19:27:52.656650 env[1104]: time="2023-10-02T19:27:52.656626034Z" level=error msg="Failed to pipe stdout of container \"6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0\"" error="reading from a closed fifo" Oct 2 19:27:52.659172 env[1104]: time="2023-10-02T19:27:52.659142785Z" level=error msg="StartContainer for \"6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:27:52.659401 kubelet[1969]: E1002 19:27:52.659374 1969 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0" Oct 2 19:27:52.659514 kubelet[1969]: E1002 19:27:52.659500 1969 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:27:52.659514 kubelet[1969]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:27:52.659514 kubelet[1969]: rm /hostbin/cilium-mount Oct 2 19:27:52.659514 kubelet[1969]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xxsf7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:27:52.659686 kubelet[1969]: E1002 19:27:52.659548 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:27:52.665040 kubelet[1969]: E1002 19:27:52.665023 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:27:52.821357 kubelet[1969]: I1002 19:27:52.821323 1969 scope.go:115] "RemoveContainer" containerID="37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54" Oct 2 19:27:52.821610 kubelet[1969]: I1002 19:27:52.821595 1969 scope.go:115] "RemoveContainer" containerID="37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54" Oct 2 19:27:52.822331 env[1104]: time="2023-10-02T19:27:52.822297551Z" level=info msg="RemoveContainer for \"37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54\"" Oct 2 19:27:52.822909 env[1104]: time="2023-10-02T19:27:52.822884068Z" level=info msg="RemoveContainer for \"37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54\"" Oct 2 19:27:52.822991 env[1104]: time="2023-10-02T19:27:52.822962576Z" level=error msg="RemoveContainer for \"37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54\" failed" error="failed to set removing state for container \"37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54\": container is already in removing state" Oct 2 19:27:52.823132 kubelet[1969]: E1002 19:27:52.823105 1969 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54\": container is already in removing state" containerID="37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54" Oct 2 19:27:52.823201 kubelet[1969]: E1002 19:27:52.823156 1969 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54": container is already in removing state; Skipping pod "cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)" Oct 2 19:27:52.823251 kubelet[1969]: E1002 19:27:52.823226 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:27:52.823512 kubelet[1969]: E1002 19:27:52.823493 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:27:52.825462 env[1104]: time="2023-10-02T19:27:52.825436546Z" level=info msg="RemoveContainer for \"37d431e7f4dfb8a480a10c7400ee90c707c523c9292acbf3427420eda6410e54\" returns successfully" Oct 2 19:27:53.606380 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0-rootfs.mount: Deactivated successfully. Oct 2 19:27:55.752861 kubelet[1969]: W1002 19:27:55.752811 1969 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podafed1df9_5b85_4fe1_8f73_4e7c8d6a65da.slice/cri-containerd-6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0.scope WatchSource:0}: task 6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0 not found: not found Oct 2 19:27:55.762479 kubelet[1969]: I1002 19:27:55.762433 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:55.762479 kubelet[1969]: I1002 19:27:55.762468 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:27:55.763653 kubelet[1969]: I1002 19:27:55.763638 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:27:55.771210 kubelet[1969]: I1002 19:27:55.771190 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:27:55.771300 kubelet[1969]: I1002 19:27:55.771251 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-controller-manager-localhost kube-system/kube-proxy-jcssq kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:27:55.771300 kubelet[1969]: E1002 19:27:55.771270 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:27:55.771300 kubelet[1969]: E1002 19:27:55.771281 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:27:55.771300 kubelet[1969]: E1002 19:27:55.771288 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:27:55.771300 kubelet[1969]: E1002 19:27:55.771295 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:27:55.771300 kubelet[1969]: E1002 19:27:55.771302 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:27:55.771439 kubelet[1969]: E1002 19:27:55.771311 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:27:55.771439 kubelet[1969]: I1002 19:27:55.771320 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:27:57.666207 kubelet[1969]: E1002 19:27:57.666175 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:00.512911 systemd[1]: Started sshd@21-10.0.0.8:22-10.0.0.1:34030.service. Oct 2 19:28:00.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.8:22-10.0.0.1:34030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:00.513664 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:00.513737 kernel: audit: type=1130 audit(1696274880.511:1226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.8:22-10.0.0.1:34030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:00.550000 audit[2765]: USER_ACCT pid=2765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:00.551961 sshd[2765]: Accepted publickey for core from 10.0.0.1 port 34030 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:28:00.553386 sshd[2765]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:00.551000 audit[2765]: CRED_ACQ pid=2765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:00.556547 kernel: audit: type=1101 audit(1696274880.550:1227): pid=2765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:00.556607 kernel: audit: type=1103 audit(1696274880.551:1228): pid=2765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:00.556626 kernel: audit: type=1006 audit(1696274880.551:1229): pid=2765 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:28:00.557145 systemd-logind[1089]: New session 22 of user core. Oct 2 19:28:00.557735 systemd[1]: Started session-22.scope. Oct 2 19:28:00.557971 kernel: audit: type=1300 audit(1696274880.551:1229): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6ea7ec70 a2=3 a3=0 items=0 ppid=1 pid=2765 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:00.551000 audit[2765]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6ea7ec70 a2=3 a3=0 items=0 ppid=1 pid=2765 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:00.551000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:00.561578 kernel: audit: type=1327 audit(1696274880.551:1229): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:00.560000 audit[2765]: USER_START pid=2765 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:00.561000 audit[2767]: CRED_ACQ pid=2767 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:00.567049 kernel: audit: type=1105 audit(1696274880.560:1230): pid=2765 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:00.567091 kernel: audit: type=1103 audit(1696274880.561:1231): pid=2767 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:00.659224 sshd[2765]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:00.658000 audit[2765]: USER_END pid=2765 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:00.661175 systemd[1]: sshd@21-10.0.0.8:22-10.0.0.1:34030.service: Deactivated successfully. Oct 2 19:28:00.661956 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:28:00.658000 audit[2765]: CRED_DISP pid=2765 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:00.665045 kernel: audit: type=1106 audit(1696274880.658:1232): pid=2765 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:00.665115 kernel: audit: type=1104 audit(1696274880.658:1233): pid=2765 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:00.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.8:22-10.0.0.1:34030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:00.665463 systemd-logind[1089]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:28:00.666042 systemd-logind[1089]: Removed session 22. Oct 2 19:28:02.690470 kubelet[1969]: E1002 19:28:02.687754 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:03.595833 kubelet[1969]: E1002 19:28:03.595005 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:03.595833 kubelet[1969]: E1002 19:28:03.595275 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:28:05.826444 kubelet[1969]: I1002 19:28:05.826406 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:05.826976 kubelet[1969]: I1002 19:28:05.826963 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:28:05.841864 kubelet[1969]: I1002 19:28:05.841752 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:28:05.856735 kubelet[1969]: I1002 19:28:05.856687 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:05.856943 kubelet[1969]: I1002 19:28:05.856785 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-controller-manager-localhost kube-system/kube-proxy-jcssq kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:28:05.856943 kubelet[1969]: E1002 19:28:05.856817 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:28:05.856943 kubelet[1969]: E1002 19:28:05.856835 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:28:05.856943 kubelet[1969]: E1002 19:28:05.856847 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:28:05.856943 kubelet[1969]: E1002 19:28:05.856860 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:28:05.856943 kubelet[1969]: E1002 19:28:05.856871 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:28:05.856943 kubelet[1969]: E1002 19:28:05.856883 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:28:05.856943 kubelet[1969]: I1002 19:28:05.856897 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:28:07.688658 kubelet[1969]: E1002 19:28:07.688601 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:10.678108 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:10.678287 kernel: audit: type=1130 audit(1696274890.669:1235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.8:22-10.0.0.1:59782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:10.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.8:22-10.0.0.1:59782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:10.673610 systemd[1]: Started sshd@22-10.0.0.8:22-10.0.0.1:59782.service. Oct 2 19:28:10.742250 sshd[2780]: Accepted publickey for core from 10.0.0.1 port 59782 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:28:10.740000 audit[2780]: USER_ACCT pid=2780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:10.745116 sshd[2780]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:10.743000 audit[2780]: CRED_ACQ pid=2780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:10.750738 kernel: audit: type=1101 audit(1696274890.740:1236): pid=2780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:10.750843 kernel: audit: type=1103 audit(1696274890.743:1237): pid=2780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:10.750881 kernel: audit: type=1006 audit(1696274890.743:1238): pid=2780 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:28:10.752742 kernel: audit: type=1300 audit(1696274890.743:1238): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca81a3fc0 a2=3 a3=0 items=0 ppid=1 pid=2780 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:10.743000 audit[2780]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca81a3fc0 a2=3 a3=0 items=0 ppid=1 pid=2780 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:10.756268 kernel: audit: type=1327 audit(1696274890.743:1238): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:10.743000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:10.757180 systemd-logind[1089]: New session 23 of user core. Oct 2 19:28:10.759161 systemd[1]: Started session-23.scope. Oct 2 19:28:10.775000 audit[2780]: USER_START pid=2780 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:10.778000 audit[2782]: CRED_ACQ pid=2782 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:10.789231 kernel: audit: type=1105 audit(1696274890.775:1239): pid=2780 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:10.789389 kernel: audit: type=1103 audit(1696274890.778:1240): pid=2782 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:10.953000 audit[2780]: USER_END pid=2780 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:10.956535 sshd[2780]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:10.962081 systemd-logind[1089]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:28:10.962776 systemd[1]: sshd@22-10.0.0.8:22-10.0.0.1:59782.service: Deactivated successfully. Oct 2 19:28:10.963605 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:28:10.953000 audit[2780]: CRED_DISP pid=2780 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:10.969024 systemd-logind[1089]: Removed session 23. Oct 2 19:28:10.994489 kernel: audit: type=1106 audit(1696274890.953:1241): pid=2780 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:10.994684 kernel: audit: type=1104 audit(1696274890.953:1242): pid=2780 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:10.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.8:22-10.0.0.1:59782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:12.698140 kubelet[1969]: E1002 19:28:12.698077 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:14.595716 kubelet[1969]: E1002 19:28:14.595040 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:14.595716 kubelet[1969]: E1002 19:28:14.595305 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:28:15.597178 kubelet[1969]: E1002 19:28:15.594768 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:15.881705 kubelet[1969]: I1002 19:28:15.880340 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:15.881705 kubelet[1969]: I1002 19:28:15.880380 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:28:15.884201 kubelet[1969]: I1002 19:28:15.884045 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:28:15.899511 kubelet[1969]: I1002 19:28:15.899449 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:15.899721 kubelet[1969]: I1002 19:28:15.899550 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-proxy-jcssq kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:28:15.899721 kubelet[1969]: E1002 19:28:15.899598 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:28:15.899721 kubelet[1969]: E1002 19:28:15.899614 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:28:15.899721 kubelet[1969]: E1002 19:28:15.899625 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:28:15.899721 kubelet[1969]: E1002 19:28:15.899636 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:28:15.899721 kubelet[1969]: E1002 19:28:15.899648 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:28:15.899721 kubelet[1969]: E1002 19:28:15.899659 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:28:15.899721 kubelet[1969]: I1002 19:28:15.899671 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:28:17.699443 kubelet[1969]: E1002 19:28:17.699405 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:20.594651 kubelet[1969]: E1002 19:28:20.594600 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:20.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.8:22-10.0.0.1:36170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:20.957297 systemd[1]: Started sshd@23-10.0.0.8:22-10.0.0.1:36170.service. Oct 2 19:28:20.958345 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:20.958409 kernel: audit: type=1130 audit(1696274900.956:1244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.8:22-10.0.0.1:36170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:20.994000 audit[2795]: USER_ACCT pid=2795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:20.995298 sshd[2795]: Accepted publickey for core from 10.0.0.1 port 36170 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:28:20.997000 audit[2795]: CRED_ACQ pid=2795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:20.998256 sshd[2795]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:21.000586 kernel: audit: type=1101 audit(1696274900.994:1245): pid=2795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:21.000717 kernel: audit: type=1103 audit(1696274900.997:1246): pid=2795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:21.000751 kernel: audit: type=1006 audit(1696274900.997:1247): pid=2795 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:28:21.002253 kernel: audit: type=1300 audit(1696274900.997:1247): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8fcca6f0 a2=3 a3=0 items=0 ppid=1 pid=2795 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:20.997000 audit[2795]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8fcca6f0 a2=3 a3=0 items=0 ppid=1 pid=2795 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:21.001942 systemd-logind[1089]: New session 24 of user core. Oct 2 19:28:21.002772 systemd[1]: Started session-24.scope. Oct 2 19:28:21.005581 kernel: audit: type=1327 audit(1696274900.997:1247): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:20.997000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:21.007000 audit[2795]: USER_START pid=2795 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:21.008000 audit[2797]: CRED_ACQ pid=2797 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:21.012788 kernel: audit: type=1105 audit(1696274901.007:1248): pid=2795 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:21.012916 kernel: audit: type=1103 audit(1696274901.008:1249): pid=2797 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:21.110068 sshd[2795]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:21.110000 audit[2795]: USER_END pid=2795 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:21.112663 systemd[1]: sshd@23-10.0.0.8:22-10.0.0.1:36170.service: Deactivated successfully. Oct 2 19:28:21.113441 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:28:21.110000 audit[2795]: CRED_DISP pid=2795 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:21.114135 systemd-logind[1089]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:28:21.114970 systemd-logind[1089]: Removed session 24. Oct 2 19:28:21.115970 kernel: audit: type=1106 audit(1696274901.110:1250): pid=2795 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:21.116033 kernel: audit: type=1104 audit(1696274901.110:1251): pid=2795 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:21.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.8:22-10.0.0.1:36170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:22.700185 kubelet[1969]: E1002 19:28:22.700144 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:23.595141 kubelet[1969]: E1002 19:28:23.595081 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:25.594430 kubelet[1969]: E1002 19:28:25.594404 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:25.594912 kubelet[1969]: E1002 19:28:25.594696 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:25.595218 kubelet[1969]: E1002 19:28:25.594959 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:28:25.910930 kubelet[1969]: I1002 19:28:25.910832 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:25.910930 kubelet[1969]: I1002 19:28:25.910861 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:28:25.912144 kubelet[1969]: I1002 19:28:25.912120 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:28:25.921186 kubelet[1969]: I1002 19:28:25.921151 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:25.921360 kubelet[1969]: I1002 19:28:25.921228 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-controller-manager-localhost kube-system/kube-proxy-jcssq kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:28:25.921360 kubelet[1969]: E1002 19:28:25.921248 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:28:25.921360 kubelet[1969]: E1002 19:28:25.921270 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:28:25.921360 kubelet[1969]: E1002 19:28:25.921279 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:28:25.921360 kubelet[1969]: E1002 19:28:25.921287 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:28:25.921360 kubelet[1969]: E1002 19:28:25.921296 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:28:25.921360 kubelet[1969]: E1002 19:28:25.921304 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:28:25.921360 kubelet[1969]: I1002 19:28:25.921315 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:28:27.240000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.243819 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:27.243884 kernel: audit: type=1400 audit(1696274907.240:1253): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.243911 kernel: audit: type=1300 audit(1696274907.240:1253): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0019c0a50 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:28:27.240000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0019c0a50 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:28:27.246915 kernel: audit: type=1327 audit(1696274907.240:1253): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:27.240000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:27.240000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.251792 kernel: audit: type=1400 audit(1696274907.240:1254): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.251822 kernel: audit: type=1300 audit(1696274907.240:1254): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0011dc1c0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:28:27.240000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0011dc1c0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:28:27.240000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:27.257427 kernel: audit: type=1327 audit(1696274907.240:1254): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:27.424000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6800 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.424000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.430138 kernel: audit: type=1400 audit(1696274907.424:1255): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6800 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.430231 kernel: audit: type=1400 audit(1696274907.424:1256): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.430249 kernel: audit: type=1400 audit(1696274907.424:1257): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.424000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.432435 kernel: audit: type=1300 audit(1696274907.424:1255): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00b7de4e0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:28:27.424000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00b7de4e0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:28:27.424000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=48 a1=c00b473dd0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:28:27.424000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00b778f00 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:28:27.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:28:27.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:28:27.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:28:27.424000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.424000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00b16c2e0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:28:27.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:28:27.424000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.424000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00b7290e0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:28:27.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:28:27.424000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:27.424000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00b473e30 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:28:27.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:28:27.701548 kubelet[1969]: E1002 19:28:27.701517 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:29.594806 kubelet[1969]: E1002 19:28:29.594772 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:31.114996 systemd[1]: Started sshd@24-10.0.0.8:22-10.0.0.1:35090.service. Oct 2 19:28:31.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.8:22-10.0.0.1:35090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:31.149000 audit[2808]: USER_ACCT pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:31.150262 sshd[2808]: Accepted publickey for core from 10.0.0.1 port 35090 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:28:31.150000 audit[2808]: CRED_ACQ pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:31.150000 audit[2808]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf8720cc0 a2=3 a3=0 items=0 ppid=1 pid=2808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:31.150000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:31.151162 sshd[2808]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:31.154666 systemd-logind[1089]: New session 25 of user core. Oct 2 19:28:31.155454 systemd[1]: Started session-25.scope. Oct 2 19:28:31.158000 audit[2808]: USER_START pid=2808 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:31.160000 audit[2810]: CRED_ACQ pid=2810 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:31.258848 sshd[2808]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:31.259000 audit[2808]: USER_END pid=2808 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:31.259000 audit[2808]: CRED_DISP pid=2808 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:31.261126 systemd[1]: sshd@24-10.0.0.8:22-10.0.0.1:35090.service: Deactivated successfully. Oct 2 19:28:31.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.8:22-10.0.0.1:35090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:31.261794 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:28:31.262306 systemd-logind[1089]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:28:31.262958 systemd-logind[1089]: Removed session 25. Oct 2 19:28:32.702822 kubelet[1969]: E1002 19:28:32.702795 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:35.787000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:35.788620 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:28:35.788692 kernel: audit: type=1400 audit(1696274915.787:1270): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:35.787000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000fbe100 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:28:35.793938 kernel: audit: type=1300 audit(1696274915.787:1270): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000fbe100 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:28:35.793978 kernel: audit: type=1327 audit(1696274915.787:1270): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:35.787000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:35.787000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:35.798673 kernel: audit: type=1400 audit(1696274915.787:1271): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:35.798723 kernel: audit: type=1300 audit(1696274915.787:1271): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00241fe60 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:28:35.787000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00241fe60 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:28:35.801658 kernel: audit: type=1327 audit(1696274915.787:1271): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:35.787000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:35.804148 kernel: audit: type=1400 audit(1696274915.789:1272): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:35.789000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:35.806405 kernel: audit: type=1300 audit(1696274915.789:1272): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001a73fc0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:28:35.789000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001a73fc0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:28:35.809525 kernel: audit: type=1327 audit(1696274915.789:1272): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:35.789000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:35.812099 kernel: audit: type=1400 audit(1696274915.790:1273): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:35.790000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:35.790000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00241ff80 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:28:35.790000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:35.932464 kubelet[1969]: I1002 19:28:35.932431 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:35.932464 kubelet[1969]: I1002 19:28:35.932459 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:28:35.933731 kubelet[1969]: I1002 19:28:35.933716 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:28:35.941884 kubelet[1969]: I1002 19:28:35.941863 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:35.941967 kubelet[1969]: I1002 19:28:35.941954 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-controller-manager-localhost kube-system/kube-proxy-jcssq kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:28:35.941994 kubelet[1969]: E1002 19:28:35.941976 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:28:35.941994 kubelet[1969]: E1002 19:28:35.941987 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:28:35.942036 kubelet[1969]: E1002 19:28:35.941995 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:28:35.942036 kubelet[1969]: E1002 19:28:35.942003 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:28:35.942036 kubelet[1969]: E1002 19:28:35.942011 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:28:35.942036 kubelet[1969]: E1002 19:28:35.942020 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:28:35.942036 kubelet[1969]: I1002 19:28:35.942029 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:28:37.594292 kubelet[1969]: E1002 19:28:37.594252 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:37.594752 kubelet[1969]: E1002 19:28:37.594445 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:28:37.704249 kubelet[1969]: E1002 19:28:37.704219 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:41.263816 systemd[1]: Started sshd@25-10.0.0.8:22-10.0.0.1:37410.service. Oct 2 19:28:41.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.8:22-10.0.0.1:37410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:41.264959 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:28:41.265021 kernel: audit: type=1130 audit(1696274921.263:1274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.8:22-10.0.0.1:37410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:41.298000 audit[2823]: USER_ACCT pid=2823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:41.298833 sshd[2823]: Accepted publickey for core from 10.0.0.1 port 37410 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:28:41.300334 sshd[2823]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:41.299000 audit[2823]: CRED_ACQ pid=2823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:41.303303 systemd-logind[1089]: New session 26 of user core. Oct 2 19:28:41.303990 systemd[1]: Started session-26.scope. Oct 2 19:28:41.305066 kernel: audit: type=1101 audit(1696274921.298:1275): pid=2823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:41.305119 kernel: audit: type=1103 audit(1696274921.299:1276): pid=2823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:41.305146 kernel: audit: type=1006 audit(1696274921.299:1277): pid=2823 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:28:41.307201 kernel: audit: type=1300 audit(1696274921.299:1277): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedc16ae20 a2=3 a3=0 items=0 ppid=1 pid=2823 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:41.299000 audit[2823]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedc16ae20 a2=3 a3=0 items=0 ppid=1 pid=2823 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:41.299000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:41.311571 kernel: audit: type=1327 audit(1696274921.299:1277): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:41.311603 kernel: audit: type=1105 audit(1696274921.307:1278): pid=2823 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:41.307000 audit[2823]: USER_START pid=2823 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:41.308000 audit[2825]: CRED_ACQ pid=2825 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:41.318115 kernel: audit: type=1103 audit(1696274921.308:1279): pid=2825 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:41.408373 sshd[2823]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:41.408000 audit[2823]: USER_END pid=2823 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:41.410375 systemd[1]: sshd@25-10.0.0.8:22-10.0.0.1:37410.service: Deactivated successfully. Oct 2 19:28:41.411168 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:28:41.411761 systemd-logind[1089]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:28:41.408000 audit[2823]: CRED_DISP pid=2823 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:41.412547 systemd-logind[1089]: Removed session 26. Oct 2 19:28:41.414328 kernel: audit: type=1106 audit(1696274921.408:1280): pid=2823 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:41.414398 kernel: audit: type=1104 audit(1696274921.408:1281): pid=2823 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:41.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.8:22-10.0.0.1:37410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:42.705319 kubelet[1969]: E1002 19:28:42.705285 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:45.959938 kubelet[1969]: I1002 19:28:45.959893 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:45.959938 kubelet[1969]: I1002 19:28:45.959930 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:28:45.961359 kubelet[1969]: I1002 19:28:45.961332 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:28:45.971570 kubelet[1969]: I1002 19:28:45.971537 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:45.971705 kubelet[1969]: I1002 19:28:45.971636 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-controller-manager-localhost kube-system/kube-proxy-jcssq kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:28:45.971705 kubelet[1969]: E1002 19:28:45.971660 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:28:45.971705 kubelet[1969]: E1002 19:28:45.971671 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:28:45.971705 kubelet[1969]: E1002 19:28:45.971679 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:28:45.971705 kubelet[1969]: E1002 19:28:45.971687 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:28:45.971705 kubelet[1969]: E1002 19:28:45.971695 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:28:45.971705 kubelet[1969]: E1002 19:28:45.971702 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:28:45.971936 kubelet[1969]: I1002 19:28:45.971714 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:28:47.706081 kubelet[1969]: E1002 19:28:47.706049 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:51.413179 systemd[1]: Started sshd@26-10.0.0.8:22-10.0.0.1:59756.service. Oct 2 19:28:51.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.8:22-10.0.0.1:59756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:51.413861 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:51.413922 kernel: audit: type=1130 audit(1696274931.411:1283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.8:22-10.0.0.1:59756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:51.452000 audit[2839]: USER_ACCT pid=2839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:51.453996 sshd[2839]: Accepted publickey for core from 10.0.0.1 port 59756 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:28:51.454000 audit[2839]: CRED_ACQ pid=2839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:51.456727 sshd[2839]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:51.458906 kernel: audit: type=1101 audit(1696274931.452:1284): pid=2839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:51.458950 kernel: audit: type=1103 audit(1696274931.454:1285): pid=2839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:51.458968 kernel: audit: type=1006 audit(1696274931.454:1286): pid=2839 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:28:51.459805 systemd-logind[1089]: New session 27 of user core. Oct 2 19:28:51.460338 kernel: audit: type=1300 audit(1696274931.454:1286): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9c7dfc40 a2=3 a3=0 items=0 ppid=1 pid=2839 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:51.454000 audit[2839]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9c7dfc40 a2=3 a3=0 items=0 ppid=1 pid=2839 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:51.460493 systemd[1]: Started session-27.scope. Oct 2 19:28:51.454000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:51.463666 kernel: audit: type=1327 audit(1696274931.454:1286): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:51.462000 audit[2839]: USER_START pid=2839 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:51.467089 kernel: audit: type=1105 audit(1696274931.462:1287): pid=2839 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:51.467134 kernel: audit: type=1103 audit(1696274931.463:1288): pid=2841 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:51.463000 audit[2841]: CRED_ACQ pid=2841 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:51.563398 sshd[2839]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:51.562000 audit[2839]: USER_END pid=2839 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:51.565574 systemd[1]: sshd@26-10.0.0.8:22-10.0.0.1:59756.service: Deactivated successfully. Oct 2 19:28:51.566211 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:28:51.566921 systemd-logind[1089]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:28:51.562000 audit[2839]: CRED_DISP pid=2839 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:51.567589 systemd-logind[1089]: Removed session 27. Oct 2 19:28:51.569210 kernel: audit: type=1106 audit(1696274931.562:1289): pid=2839 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:51.569261 kernel: audit: type=1104 audit(1696274931.562:1290): pid=2839 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:28:51.562000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.8:22-10.0.0.1:59756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:51.593998 kubelet[1969]: E1002 19:28:51.593970 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:28:51.594222 kubelet[1969]: E1002 19:28:51.594160 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:28:52.706944 kubelet[1969]: E1002 19:28:52.706916 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:55.984921 kubelet[1969]: I1002 19:28:55.984876 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:55.984921 kubelet[1969]: I1002 19:28:55.984915 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:28:55.986624 kubelet[1969]: I1002 19:28:55.986606 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:28:55.997389 kubelet[1969]: I1002 19:28:55.997356 1969 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:28:55.997550 kubelet[1969]: I1002 19:28:55.997436 1969 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/cilium-9xjf5 kube-system/cilium-operator-574c4bb98d-rxpsj kube-system/kube-controller-manager-localhost kube-system/kube-proxy-jcssq kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:28:55.997550 kubelet[1969]: E1002 19:28:55.997458 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-9xjf5" Oct 2 19:28:55.997550 kubelet[1969]: E1002 19:28:55.997469 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-574c4bb98d-rxpsj" Oct 2 19:28:55.997550 kubelet[1969]: E1002 19:28:55.997478 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:28:55.997550 kubelet[1969]: E1002 19:28:55.997485 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-jcssq" Oct 2 19:28:55.997550 kubelet[1969]: E1002 19:28:55.997492 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:28:55.997550 kubelet[1969]: E1002 19:28:55.997500 1969 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:28:55.997550 kubelet[1969]: I1002 19:28:55.997509 1969 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:28:57.708320 kubelet[1969]: E1002 19:28:57.708289 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:01.568922 systemd[1]: Started sshd@27-10.0.0.8:22-10.0.0.1:54176.service. Oct 2 19:29:01.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.8:22-10.0.0.1:54176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:01.569804 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:29:01.569843 kernel: audit: type=1130 audit(1696274941.568:1292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.8:22-10.0.0.1:54176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:01.605000 audit[2852]: USER_ACCT pid=2852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.606701 sshd[2852]: Accepted publickey for core from 10.0.0.1 port 54176 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:29:01.608000 audit[2852]: CRED_ACQ pid=2852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.609816 sshd[2852]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:01.612024 kernel: audit: type=1101 audit(1696274941.605:1293): pid=2852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.612084 kernel: audit: type=1103 audit(1696274941.608:1294): pid=2852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.612123 kernel: audit: type=1006 audit(1696274941.608:1295): pid=2852 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:29:01.608000 audit[2852]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffca15d6a0 a2=3 a3=0 items=0 ppid=1 pid=2852 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:01.613769 systemd-logind[1089]: New session 28 of user core. Oct 2 19:29:01.614953 systemd[1]: Started session-28.scope. Oct 2 19:29:01.616841 kernel: audit: type=1300 audit(1696274941.608:1295): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffca15d6a0 a2=3 a3=0 items=0 ppid=1 pid=2852 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:01.616898 kernel: audit: type=1327 audit(1696274941.608:1295): proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:01.608000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:01.619000 audit[2852]: USER_START pid=2852 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.620000 audit[2854]: CRED_ACQ pid=2854 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.626324 kernel: audit: type=1105 audit(1696274941.619:1296): pid=2852 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.626393 kernel: audit: type=1103 audit(1696274941.620:1297): pid=2854 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.723461 sshd[2852]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:01.724000 audit[2852]: USER_END pid=2852 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.726108 systemd[1]: sshd@27-10.0.0.8:22-10.0.0.1:54176.service: Deactivated successfully. Oct 2 19:29:01.726566 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:29:01.727105 systemd-logind[1089]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:29:01.728074 systemd[1]: Started sshd@28-10.0.0.8:22-10.0.0.1:54182.service. Oct 2 19:29:01.724000 audit[2852]: CRED_DISP pid=2852 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.728821 systemd-logind[1089]: Removed session 28. Oct 2 19:29:01.730708 kernel: audit: type=1106 audit(1696274941.724:1298): pid=2852 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.730768 kernel: audit: type=1104 audit(1696274941.724:1299): pid=2852 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.8:22-10.0.0.1:54176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:01.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.8:22-10.0.0.1:54182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:01.765000 audit[2866]: USER_ACCT pid=2866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.766716 sshd[2866]: Accepted publickey for core from 10.0.0.1 port 54182 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:29:01.766000 audit[2866]: CRED_ACQ pid=2866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.766000 audit[2866]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcd4e5750 a2=3 a3=0 items=0 ppid=1 pid=2866 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:01.766000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:01.767741 sshd[2866]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:01.770731 systemd-logind[1089]: New session 29 of user core. Oct 2 19:29:01.771432 systemd[1]: Started session-29.scope. Oct 2 19:29:01.775000 audit[2866]: USER_START pid=2866 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:01.776000 audit[2869]: CRED_ACQ pid=2869 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:02.594862 kubelet[1969]: E1002 19:29:02.594829 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:02.595240 kubelet[1969]: E1002 19:29:02.595024 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-9xjf5_kube-system(afed1df9-5b85-4fe1-8f73-4e7c8d6a65da)\"" pod="kube-system/cilium-9xjf5" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da Oct 2 19:29:02.709182 kubelet[1969]: E1002 19:29:02.709154 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:03.094670 env[1104]: time="2023-10-02T19:29:03.094612282Z" level=info msg="StopPodSandbox for \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\"" Oct 2 19:29:03.095068 env[1104]: time="2023-10-02T19:29:03.094733704Z" level=info msg="Container to stop \"6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:29:03.097935 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7-shm.mount: Deactivated successfully. Oct 2 19:29:03.100783 systemd[1]: cri-containerd-4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7.scope: Deactivated successfully. Oct 2 19:29:03.100000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:29:03.102780 env[1104]: time="2023-10-02T19:29:03.102726747Z" level=info msg="StopContainer for \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\" with timeout 30 (s)" Oct 2 19:29:03.103127 env[1104]: time="2023-10-02T19:29:03.103102578Z" level=info msg="Stop container \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\" with signal terminated" Oct 2 19:29:03.107000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:29:03.120044 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7-rootfs.mount: Deactivated successfully. Oct 2 19:29:03.120521 systemd[1]: cri-containerd-ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca.scope: Deactivated successfully. Oct 2 19:29:03.120000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:29:03.125000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:29:03.133022 env[1104]: time="2023-10-02T19:29:03.132979176Z" level=info msg="shim disconnected" id=4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7 Oct 2 19:29:03.133220 env[1104]: time="2023-10-02T19:29:03.133188898Z" level=warning msg="cleaning up after shim disconnected" id=4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7 namespace=k8s.io Oct 2 19:29:03.133220 env[1104]: time="2023-10-02T19:29:03.133208756Z" level=info msg="cleaning up dead shim" Oct 2 19:29:03.134461 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca-rootfs.mount: Deactivated successfully. Oct 2 19:29:03.140214 env[1104]: time="2023-10-02T19:29:03.140172023Z" level=info msg="shim disconnected" id=ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca Oct 2 19:29:03.140214 env[1104]: time="2023-10-02T19:29:03.140206149Z" level=warning msg="cleaning up after shim disconnected" id=ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca namespace=k8s.io Oct 2 19:29:03.140214 env[1104]: time="2023-10-02T19:29:03.140213693Z" level=info msg="cleaning up dead shim" Oct 2 19:29:03.140694 env[1104]: time="2023-10-02T19:29:03.140664949Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2913 runtime=io.containerd.runc.v2\n" Oct 2 19:29:03.141022 env[1104]: time="2023-10-02T19:29:03.141000774Z" level=info msg="TearDown network for sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" successfully" Oct 2 19:29:03.141102 env[1104]: time="2023-10-02T19:29:03.141080626Z" level=info msg="StopPodSandbox for \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" returns successfully" Oct 2 19:29:03.146734 env[1104]: time="2023-10-02T19:29:03.146671619Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2925 runtime=io.containerd.runc.v2\n" Oct 2 19:29:03.149324 env[1104]: time="2023-10-02T19:29:03.149288692Z" level=info msg="StopContainer for \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\" returns successfully" Oct 2 19:29:03.149796 env[1104]: time="2023-10-02T19:29:03.149777651Z" level=info msg="StopPodSandbox for \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\"" Oct 2 19:29:03.149857 env[1104]: time="2023-10-02T19:29:03.149821916Z" level=info msg="Container to stop \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:29:03.151012 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3-shm.mount: Deactivated successfully. Oct 2 19:29:03.155900 systemd[1]: cri-containerd-286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3.scope: Deactivated successfully. Oct 2 19:29:03.155000 audit: BPF prog-id=106 op=UNLOAD Oct 2 19:29:03.161000 audit: BPF prog-id=109 op=UNLOAD Oct 2 19:29:03.170899 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3-rootfs.mount: Deactivated successfully. Oct 2 19:29:03.185047 env[1104]: time="2023-10-02T19:29:03.184985382Z" level=info msg="shim disconnected" id=286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3 Oct 2 19:29:03.185047 env[1104]: time="2023-10-02T19:29:03.185029887Z" level=warning msg="cleaning up after shim disconnected" id=286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3 namespace=k8s.io Oct 2 19:29:03.185047 env[1104]: time="2023-10-02T19:29:03.185037041Z" level=info msg="cleaning up dead shim" Oct 2 19:29:03.190891 env[1104]: time="2023-10-02T19:29:03.190855028Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2957 runtime=io.containerd.runc.v2\n" Oct 2 19:29:03.191101 env[1104]: time="2023-10-02T19:29:03.191078858Z" level=info msg="TearDown network for sandbox \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\" successfully" Oct 2 19:29:03.191136 env[1104]: time="2023-10-02T19:29:03.191100149Z" level=info msg="StopPodSandbox for \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\" returns successfully" Oct 2 19:29:03.230271 kubelet[1969]: I1002 19:29:03.230228 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-hostproc\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230271 kubelet[1969]: I1002 19:29:03.230282 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-clustermesh-secrets\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230524 kubelet[1969]: I1002 19:29:03.230300 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cilium-run\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230524 kubelet[1969]: I1002 19:29:03.230324 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-host-proc-sys-kernel\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230524 kubelet[1969]: I1002 19:29:03.230343 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cilium-config-path\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230524 kubelet[1969]: I1002 19:29:03.230359 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cni-path\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230524 kubelet[1969]: I1002 19:29:03.230358 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:03.230524 kubelet[1969]: I1002 19:29:03.230377 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-w8f9p\" (UniqueName: \"kubernetes.io/projected/5ea176c4-8a4f-49c6-a46d-f2e72616a44d-kube-api-access-w8f9p\") pod \"5ea176c4-8a4f-49c6-a46d-f2e72616a44d\" (UID: \"5ea176c4-8a4f-49c6-a46d-f2e72616a44d\") " Oct 2 19:29:03.230524 kubelet[1969]: I1002 19:29:03.230439 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-host-proc-sys-net\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230524 kubelet[1969]: I1002 19:29:03.230464 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-etc-cni-netd\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230524 kubelet[1969]: I1002 19:29:03.230494 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5ea176c4-8a4f-49c6-a46d-f2e72616a44d-cilium-config-path\") pod \"5ea176c4-8a4f-49c6-a46d-f2e72616a44d\" (UID: \"5ea176c4-8a4f-49c6-a46d-f2e72616a44d\") " Oct 2 19:29:03.230524 kubelet[1969]: I1002 19:29:03.230517 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-bpf-maps\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230896 kubelet[1969]: I1002 19:29:03.230544 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-xxsf7\" (UniqueName: \"kubernetes.io/projected/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-kube-api-access-xxsf7\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230896 kubelet[1969]: I1002 19:29:03.230595 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-lib-modules\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230896 kubelet[1969]: I1002 19:29:03.230622 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-xtables-lock\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230896 kubelet[1969]: I1002 19:29:03.230647 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cilium-cgroup\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230896 kubelet[1969]: I1002 19:29:03.230673 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-hubble-tls\") pod \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\" (UID: \"afed1df9-5b85-4fe1-8f73-4e7c8d6a65da\") " Oct 2 19:29:03.230896 kubelet[1969]: I1002 19:29:03.230684 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:03.230896 kubelet[1969]: I1002 19:29:03.230709 1969 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.230896 kubelet[1969]: W1002 19:29:03.230792 1969 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:29:03.231169 kubelet[1969]: I1002 19:29:03.230952 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-hostproc" (OuterVolumeSpecName: "hostproc") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:03.231169 kubelet[1969]: I1002 19:29:03.230984 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:03.231169 kubelet[1969]: I1002 19:29:03.231005 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:03.231169 kubelet[1969]: I1002 19:29:03.231023 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:03.231308 kubelet[1969]: W1002 19:29:03.231163 1969 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/5ea176c4-8a4f-49c6-a46d-f2e72616a44d/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:29:03.232481 kubelet[1969]: I1002 19:29:03.231469 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:03.232481 kubelet[1969]: I1002 19:29:03.232033 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:03.232481 kubelet[1969]: I1002 19:29:03.232076 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:03.233853 kubelet[1969]: I1002 19:29:03.232823 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:29:03.233853 kubelet[1969]: I1002 19:29:03.232859 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cni-path" (OuterVolumeSpecName: "cni-path") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:29:03.233983 kubelet[1969]: I1002 19:29:03.233954 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/5ea176c4-8a4f-49c6-a46d-f2e72616a44d-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "5ea176c4-8a4f-49c6-a46d-f2e72616a44d" (UID: "5ea176c4-8a4f-49c6-a46d-f2e72616a44d"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:29:03.235229 kubelet[1969]: I1002 19:29:03.235205 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-kube-api-access-xxsf7" (OuterVolumeSpecName: "kube-api-access-xxsf7") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "kube-api-access-xxsf7". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:29:03.235285 kubelet[1969]: I1002 19:29:03.235265 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:29:03.235471 kubelet[1969]: I1002 19:29:03.235454 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" (UID: "afed1df9-5b85-4fe1-8f73-4e7c8d6a65da"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:29:03.235746 kubelet[1969]: I1002 19:29:03.235716 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/5ea176c4-8a4f-49c6-a46d-f2e72616a44d-kube-api-access-w8f9p" (OuterVolumeSpecName: "kube-api-access-w8f9p") pod "5ea176c4-8a4f-49c6-a46d-f2e72616a44d" (UID: "5ea176c4-8a4f-49c6-a46d-f2e72616a44d"). InnerVolumeSpecName "kube-api-access-w8f9p". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:29:03.330976 kubelet[1969]: I1002 19:29:03.330930 1969 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.330976 kubelet[1969]: I1002 19:29:03.330965 1969 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.330976 kubelet[1969]: I1002 19:29:03.330976 1969 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.330976 kubelet[1969]: I1002 19:29:03.330984 1969 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.331189 kubelet[1969]: I1002 19:29:03.330992 1969 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.331189 kubelet[1969]: I1002 19:29:03.331001 1969 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-w8f9p\" (UniqueName: \"kubernetes.io/projected/5ea176c4-8a4f-49c6-a46d-f2e72616a44d-kube-api-access-w8f9p\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.331189 kubelet[1969]: I1002 19:29:03.331008 1969 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.331189 kubelet[1969]: I1002 19:29:03.331016 1969 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5ea176c4-8a4f-49c6-a46d-f2e72616a44d-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.331189 kubelet[1969]: I1002 19:29:03.331027 1969 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-xxsf7\" (UniqueName: \"kubernetes.io/projected/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-kube-api-access-xxsf7\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.331189 kubelet[1969]: I1002 19:29:03.331035 1969 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.331189 kubelet[1969]: I1002 19:29:03.331051 1969 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.331189 kubelet[1969]: I1002 19:29:03.331059 1969 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.331189 kubelet[1969]: I1002 19:29:03.331066 1969 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.331189 kubelet[1969]: I1002 19:29:03.331073 1969 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:03.331189 kubelet[1969]: I1002 19:29:03.331082 1969 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:29:04.000023 kubelet[1969]: I1002 19:29:03.999979 1969 scope.go:115] "RemoveContainer" containerID="ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca" Oct 2 19:29:04.003507 env[1104]: time="2023-10-02T19:29:04.003449854Z" level=info msg="RemoveContainer for \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\"" Oct 2 19:29:04.004108 systemd[1]: Removed slice kubepods-besteffort-pod5ea176c4_8a4f_49c6_a46d_f2e72616a44d.slice. Oct 2 19:29:04.006544 env[1104]: time="2023-10-02T19:29:04.006513623Z" level=info msg="RemoveContainer for \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\" returns successfully" Oct 2 19:29:04.006752 kubelet[1969]: I1002 19:29:04.006735 1969 scope.go:115] "RemoveContainer" containerID="ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca" Oct 2 19:29:04.007389 env[1104]: time="2023-10-02T19:29:04.007275156Z" level=error msg="ContainerStatus for \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\": not found" Oct 2 19:29:04.007513 systemd[1]: Removed slice kubepods-burstable-podafed1df9_5b85_4fe1_8f73_4e7c8d6a65da.slice. Oct 2 19:29:04.007815 kubelet[1969]: E1002 19:29:04.007540 1969 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\": not found" containerID="ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca" Oct 2 19:29:04.007815 kubelet[1969]: I1002 19:29:04.007596 1969 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca} err="failed to get container status \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\": rpc error: code = NotFound desc = an error occurred when try to find container \"ccc9ad2d51f7f7fba686a4082332615609d10276355951228aaee7b53b9482ca\": not found" Oct 2 19:29:04.007815 kubelet[1969]: I1002 19:29:04.007605 1969 scope.go:115] "RemoveContainer" containerID="6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0" Oct 2 19:29:04.008309 env[1104]: time="2023-10-02T19:29:04.008285013Z" level=info msg="RemoveContainer for \"6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0\"" Oct 2 19:29:04.011107 env[1104]: time="2023-10-02T19:29:04.011080357Z" level=info msg="RemoveContainer for \"6c521023d9c85c2c5ac243b46e76897d6d3138fb57957b328dcfdda0aafd70d0\" returns successfully" Oct 2 19:29:04.097743 systemd[1]: var-lib-kubelet-pods-afed1df9\x2d5b85\x2d4fe1\x2d8f73\x2d4e7c8d6a65da-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dxxsf7.mount: Deactivated successfully. Oct 2 19:29:04.097843 systemd[1]: var-lib-kubelet-pods-5ea176c4\x2d8a4f\x2d49c6\x2da46d\x2df2e72616a44d-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dw8f9p.mount: Deactivated successfully. Oct 2 19:29:04.097890 systemd[1]: var-lib-kubelet-pods-afed1df9\x2d5b85\x2d4fe1\x2d8f73\x2d4e7c8d6a65da-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:29:04.097939 systemd[1]: var-lib-kubelet-pods-afed1df9\x2d5b85\x2d4fe1\x2d8f73\x2d4e7c8d6a65da-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:29:04.596343 kubelet[1969]: I1002 19:29:04.596295 1969 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=5ea176c4-8a4f-49c6-a46d-f2e72616a44d path="/var/lib/kubelet/pods/5ea176c4-8a4f-49c6-a46d-f2e72616a44d/volumes" Oct 2 19:29:04.596877 kubelet[1969]: I1002 19:29:04.596851 1969 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=afed1df9-5b85-4fe1-8f73-4e7c8d6a65da path="/var/lib/kubelet/pods/afed1df9-5b85-4fe1-8f73-4e7c8d6a65da/volumes" Oct 2 19:29:05.061239 sshd[2866]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:05.061000 audit[2866]: USER_END pid=2866 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:05.061000 audit[2866]: CRED_DISP pid=2866 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:05.063735 systemd[1]: sshd@28-10.0.0.8:22-10.0.0.1:54182.service: Deactivated successfully. Oct 2 19:29:05.064279 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:29:05.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.8:22-10.0.0.1:54182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:05.064821 systemd-logind[1089]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:29:05.065934 systemd[1]: Started sshd@29-10.0.0.8:22-10.0.0.1:59764.service. Oct 2 19:29:05.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.8:22-10.0.0.1:59764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:05.066668 systemd-logind[1089]: Removed session 29. Oct 2 19:29:05.102000 audit[2977]: USER_ACCT pid=2977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:05.103677 sshd[2977]: Accepted publickey for core from 10.0.0.1 port 59764 ssh2: RSA SHA256:x9xJB2cV8UsO4GVnWDAZ5NHrwqTZPr56IKagATY++jc Oct 2 19:29:05.104000 audit[2977]: CRED_ACQ pid=2977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:05.104000 audit[2977]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4b6e92d0 a2=3 a3=0 items=0 ppid=1 pid=2977 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:05.104000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:05.104958 sshd[2977]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:05.108319 systemd-logind[1089]: New session 30 of user core. Oct 2 19:29:05.109307 systemd[1]: Started session-30.scope. Oct 2 19:29:05.112000 audit[2977]: USER_START pid=2977 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:05.113000 audit[2979]: CRED_ACQ pid=2979 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:05.627249 kubelet[1969]: I1002 19:29:05.627210 1969 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:29:05.627249 kubelet[1969]: E1002 19:29:05.627261 1969 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" containerName="mount-cgroup" Oct 2 19:29:05.627751 kubelet[1969]: E1002 19:29:05.627271 1969 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5ea176c4-8a4f-49c6-a46d-f2e72616a44d" containerName="cilium-operator" Oct 2 19:29:05.627751 kubelet[1969]: E1002 19:29:05.627276 1969 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" containerName="mount-cgroup" Oct 2 19:29:05.627751 kubelet[1969]: E1002 19:29:05.627283 1969 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" containerName="mount-cgroup" Oct 2 19:29:05.627751 kubelet[1969]: I1002 19:29:05.627300 1969 memory_manager.go:346] "RemoveStaleState removing state" podUID="5ea176c4-8a4f-49c6-a46d-f2e72616a44d" containerName="cilium-operator" Oct 2 19:29:05.627751 kubelet[1969]: I1002 19:29:05.627305 1969 memory_manager.go:346] "RemoveStaleState removing state" podUID="afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" containerName="mount-cgroup" Oct 2 19:29:05.627751 kubelet[1969]: I1002 19:29:05.627310 1969 memory_manager.go:346] "RemoveStaleState removing state" podUID="afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" containerName="mount-cgroup" Oct 2 19:29:05.627751 kubelet[1969]: I1002 19:29:05.627315 1969 memory_manager.go:346] "RemoveStaleState removing state" podUID="afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" containerName="mount-cgroup" Oct 2 19:29:05.627751 kubelet[1969]: I1002 19:29:05.627321 1969 memory_manager.go:346] "RemoveStaleState removing state" podUID="afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" containerName="mount-cgroup" Oct 2 19:29:05.627751 kubelet[1969]: I1002 19:29:05.627326 1969 memory_manager.go:346] "RemoveStaleState removing state" podUID="afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" containerName="mount-cgroup" Oct 2 19:29:05.627751 kubelet[1969]: E1002 19:29:05.627339 1969 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" containerName="mount-cgroup" Oct 2 19:29:05.627751 kubelet[1969]: E1002 19:29:05.627358 1969 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="afed1df9-5b85-4fe1-8f73-4e7c8d6a65da" containerName="mount-cgroup" Oct 2 19:29:05.631323 systemd[1]: Created slice kubepods-burstable-pod479475a0_f791_44dd_a932_6ef5297dc8bb.slice. Oct 2 19:29:05.634081 kubelet[1969]: W1002 19:29:05.634053 1969 reflector.go:533] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:29:05.634081 kubelet[1969]: E1002 19:29:05.634083 1969 reflector.go:148] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:29:05.634081 kubelet[1969]: W1002 19:29:05.634086 1969 reflector.go:533] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:29:05.634300 kubelet[1969]: W1002 19:29:05.634052 1969 reflector.go:533] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:29:05.634300 kubelet[1969]: E1002 19:29:05.634099 1969 reflector.go:148] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:29:05.634300 kubelet[1969]: E1002 19:29:05.634099 1969 reflector.go:148] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:29:05.742801 kubelet[1969]: I1002 19:29:05.742751 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/479475a0-f791-44dd-a932-6ef5297dc8bb-hubble-tls\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.742801 kubelet[1969]: I1002 19:29:05.742791 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ch592\" (UniqueName: \"kubernetes.io/projected/479475a0-f791-44dd-a932-6ef5297dc8bb-kube-api-access-ch592\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.742801 kubelet[1969]: I1002 19:29:05.742808 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-xtables-lock\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.743058 kubelet[1969]: I1002 19:29:05.742828 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-bpf-maps\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.743058 kubelet[1969]: I1002 19:29:05.742908 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-etc-cni-netd\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.743058 kubelet[1969]: I1002 19:29:05.742963 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-host-proc-sys-kernel\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.743058 kubelet[1969]: I1002 19:29:05.743005 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-lib-modules\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.743058 kubelet[1969]: I1002 19:29:05.743043 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-run\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.743273 kubelet[1969]: I1002 19:29:05.743067 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-cni-path\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.743273 kubelet[1969]: I1002 19:29:05.743095 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-ipsec-secrets\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.743273 kubelet[1969]: I1002 19:29:05.743121 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-hostproc\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.743273 kubelet[1969]: I1002 19:29:05.743152 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/479475a0-f791-44dd-a932-6ef5297dc8bb-clustermesh-secrets\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.743273 kubelet[1969]: I1002 19:29:05.743186 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-config-path\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.743273 kubelet[1969]: I1002 19:29:05.743229 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-host-proc-sys-net\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:05.743273 kubelet[1969]: I1002 19:29:05.743251 1969 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-cgroup\") pod \"cilium-wlq8x\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " pod="kube-system/cilium-wlq8x" Oct 2 19:29:06.008436 kubelet[1969]: I1002 19:29:06.008334 1969 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:29:06.008686 kubelet[1969]: I1002 19:29:06.008668 1969 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:29:06.009661 env[1104]: time="2023-10-02T19:29:06.009632517Z" level=info msg="StopPodSandbox for \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\"" Oct 2 19:29:06.009866 env[1104]: time="2023-10-02T19:29:06.009704857Z" level=info msg="TearDown network for sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" successfully" Oct 2 19:29:06.009866 env[1104]: time="2023-10-02T19:29:06.009740996Z" level=info msg="StopPodSandbox for \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" returns successfully" Oct 2 19:29:06.010188 env[1104]: time="2023-10-02T19:29:06.010164287Z" level=info msg="RemovePodSandbox for \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\"" Oct 2 19:29:06.010250 env[1104]: time="2023-10-02T19:29:06.010199095Z" level=info msg="Forcibly stopping sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\"" Oct 2 19:29:06.010273 env[1104]: time="2023-10-02T19:29:06.010254671Z" level=info msg="TearDown network for sandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" successfully" Oct 2 19:29:06.012829 env[1104]: time="2023-10-02T19:29:06.012803289Z" level=info msg="RemovePodSandbox \"4a14794a7d9ac99eb6dde45dcd7ff833c13ed7105b7d9124f3fdbe4e2a43deb7\" returns successfully" Oct 2 19:29:06.013208 env[1104]: time="2023-10-02T19:29:06.013176024Z" level=info msg="StopPodSandbox for \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\"" Oct 2 19:29:06.013296 env[1104]: time="2023-10-02T19:29:06.013258392Z" level=info msg="TearDown network for sandbox \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\" successfully" Oct 2 19:29:06.013296 env[1104]: time="2023-10-02T19:29:06.013292197Z" level=info msg="StopPodSandbox for \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\" returns successfully" Oct 2 19:29:06.013535 env[1104]: time="2023-10-02T19:29:06.013516647Z" level=info msg="RemovePodSandbox for \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\"" Oct 2 19:29:06.013612 env[1104]: time="2023-10-02T19:29:06.013535634Z" level=info msg="Forcibly stopping sandbox \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\"" Oct 2 19:29:06.013612 env[1104]: time="2023-10-02T19:29:06.013590600Z" level=info msg="TearDown network for sandbox \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\" successfully" Oct 2 19:29:06.016328 env[1104]: time="2023-10-02T19:29:06.016295237Z" level=info msg="RemovePodSandbox \"286ca6d1f723a3873b277075cb47c01c943f4ae8ad95475d4585f4fdc3989bd3\" returns successfully" Oct 2 19:29:06.016834 kubelet[1969]: I1002 19:29:06.016808 1969 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:29:06.018136 kubelet[1969]: I1002 19:29:06.018113 1969 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c" size=18897442 Oct 2 19:29:06.018264 env[1104]: time="2023-10-02T19:29:06.018236660Z" level=info msg="RemoveImage \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:29:06.019532 env[1104]: time="2023-10-02T19:29:06.019502268Z" level=info msg="ImageDelete event &ImageDelete{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,XXX_unrecognized:[],}" Oct 2 19:29:06.020213 env[1104]: time="2023-10-02T19:29:06.020190448Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,XXX_unrecognized:[],}" Oct 2 19:29:06.037622 env[1104]: time="2023-10-02T19:29:06.037538031Z" level=info msg="RemoveImage \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\" returns successfully" Oct 2 19:29:06.037914 kubelet[1969]: I1002 19:29:06.037876 1969 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b" size=166719855 Oct 2 19:29:06.038140 env[1104]: time="2023-10-02T19:29:06.038118374Z" level=info msg="RemoveImage \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:29:06.039289 env[1104]: time="2023-10-02T19:29:06.039248000Z" level=info msg="ImageDelete event &ImageDelete{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,XXX_unrecognized:[],}" Oct 2 19:29:06.040032 env[1104]: time="2023-10-02T19:29:06.040003741Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,XXX_unrecognized:[],}" Oct 2 19:29:06.159890 env[1104]: time="2023-10-02T19:29:06.159828708Z" level=info msg="RemoveImage \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\" returns successfully" Oct 2 19:29:06.167032 kubelet[1969]: I1002 19:29:06.166990 1969 eviction_manager.go:353] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:29:06.844860 kubelet[1969]: E1002 19:29:06.844818 1969 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:29:06.844860 kubelet[1969]: E1002 19:29:06.844854 1969 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-wlq8x: failed to sync secret cache: timed out waiting for the condition Oct 2 19:29:06.845222 kubelet[1969]: E1002 19:29:06.844910 1969 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/479475a0-f791-44dd-a932-6ef5297dc8bb-hubble-tls podName:479475a0-f791-44dd-a932-6ef5297dc8bb nodeName:}" failed. No retries permitted until 2023-10-02 19:29:07.344892946 +0000 UTC m=+214.839671891 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/479475a0-f791-44dd-a932-6ef5297dc8bb-hubble-tls") pod "cilium-wlq8x" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:29:06.845222 kubelet[1969]: E1002 19:29:06.844824 1969 secret.go:194] Couldn't get secret kube-system/cilium-ipsec-keys: failed to sync secret cache: timed out waiting for the condition Oct 2 19:29:06.845222 kubelet[1969]: E1002 19:29:06.844973 1969 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-ipsec-secrets podName:479475a0-f791-44dd-a932-6ef5297dc8bb nodeName:}" failed. No retries permitted until 2023-10-02 19:29:07.344962549 +0000 UTC m=+214.839741494 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-ipsec-secrets" (UniqueName: "kubernetes.io/secret/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-ipsec-secrets") pod "cilium-wlq8x" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:29:07.433830 kubelet[1969]: E1002 19:29:07.433770 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:07.434347 env[1104]: time="2023-10-02T19:29:07.434297059Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-wlq8x,Uid:479475a0-f791-44dd-a932-6ef5297dc8bb,Namespace:kube-system,Attempt:0,}" Oct 2 19:29:07.709918 kubelet[1969]: E1002 19:29:07.709794 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:07.894483 env[1104]: time="2023-10-02T19:29:07.894391042Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:07.896749 env[1104]: time="2023-10-02T19:29:07.896712323Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:07.898380 env[1104]: time="2023-10-02T19:29:07.898357237Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:07.899619 env[1104]: time="2023-10-02T19:29:07.899591514Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:07.911055 env[1104]: time="2023-10-02T19:29:07.910999399Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:29:07.911055 env[1104]: time="2023-10-02T19:29:07.911037622Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:29:07.911055 env[1104]: time="2023-10-02T19:29:07.911047822Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:29:07.911231 env[1104]: time="2023-10-02T19:29:07.911192349Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b pid=2998 runtime=io.containerd.runc.v2 Oct 2 19:29:07.922624 systemd[1]: Started cri-containerd-5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b.scope. Oct 2 19:29:07.943604 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 19:29:07.943741 kernel: audit: type=1400 audit(1696274947.934:1322): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943764 kernel: audit: type=1400 audit(1696274947.934:1323): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943787 kernel: audit: type=1400 audit(1696274947.934:1324): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943807 kernel: audit: type=1400 audit(1696274947.934:1325): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.945890 kernel: audit: type=1400 audit(1696274947.934:1326): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.947847 kernel: audit: type=1400 audit(1696274947.934:1327): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.949787 kernel: audit: type=1400 audit(1696274947.934:1328): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.951701 kernel: audit: type=1400 audit(1696274947.934:1329): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.951727 kernel: audit: type=1400 audit(1696274947.934:1330): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.955336 kernel: audit: type=1400 audit(1696274947.936:1331): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.936000 audit: BPF prog-id=125 op=LOAD Oct 2 19:29:07.937000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.937000 audit[3007]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2998 pid=3007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:07.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653064363032333963306237393530316664326463333463363336 Oct 2 19:29:07.937000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.937000 audit[3007]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2998 pid=3007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:07.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653064363032333963306237393530316664326463333463363336 Oct 2 19:29:07.937000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.937000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.937000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.937000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.937000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.937000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.937000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.937000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.937000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.937000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.937000 audit: BPF prog-id=126 op=LOAD Oct 2 19:29:07.937000 audit[3007]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000295150 items=0 ppid=2998 pid=3007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:07.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653064363032333963306237393530316664326463333463363336 Oct 2 19:29:07.941000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.941000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.941000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.941000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.941000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.941000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.941000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.941000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.941000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.941000 audit: BPF prog-id=127 op=LOAD Oct 2 19:29:07.941000 audit[3007]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000295198 items=0 ppid=2998 pid=3007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:07.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653064363032333963306237393530316664326463333463363336 Oct 2 19:29:07.943000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:29:07.943000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:29:07.943000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943000 audit[3007]: AVC avc: denied { perfmon } for pid=3007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943000 audit[3007]: AVC avc: denied { bpf } for pid=3007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:07.943000 audit: BPF prog-id=128 op=LOAD Oct 2 19:29:07.943000 audit[3007]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002955a8 items=0 ppid=2998 pid=3007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:07.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653064363032333963306237393530316664326463333463363336 Oct 2 19:29:07.963075 env[1104]: time="2023-10-02T19:29:07.962995344Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-wlq8x,Uid:479475a0-f791-44dd-a932-6ef5297dc8bb,Namespace:kube-system,Attempt:0,} returns sandbox id \"5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b\"" Oct 2 19:29:07.964245 kubelet[1969]: E1002 19:29:07.963701 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:07.964861 env[1104]: time="2023-10-02T19:29:07.964817077Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:29:08.355835 systemd[1]: run-containerd-runc-k8s.io-5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b-runc.LbbM3W.mount: Deactivated successfully. Oct 2 19:29:12.521079 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2372622483.mount: Deactivated successfully. Oct 2 19:29:12.711321 kubelet[1969]: E1002 19:29:12.711292 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:15.668311 env[1104]: time="2023-10-02T19:29:15.668222469Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:15.670186 env[1104]: time="2023-10-02T19:29:15.670152122Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:15.671677 env[1104]: time="2023-10-02T19:29:15.671641973Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:15.672253 env[1104]: time="2023-10-02T19:29:15.672212315Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:29:15.674151 env[1104]: time="2023-10-02T19:29:15.674108094Z" level=info msg="CreateContainer within sandbox \"5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:29:15.684434 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3685609777.mount: Deactivated successfully. Oct 2 19:29:15.686325 env[1104]: time="2023-10-02T19:29:15.686276153Z" level=info msg="CreateContainer within sandbox \"5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260\"" Oct 2 19:29:15.687012 env[1104]: time="2023-10-02T19:29:15.686961425Z" level=info msg="StartContainer for \"9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260\"" Oct 2 19:29:15.701832 systemd[1]: Started cri-containerd-9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260.scope. Oct 2 19:29:15.708808 systemd[1]: cri-containerd-9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260.scope: Deactivated successfully. Oct 2 19:29:15.709154 systemd[1]: Stopped cri-containerd-9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260.scope. Oct 2 19:29:15.712693 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260-rootfs.mount: Deactivated successfully. Oct 2 19:29:16.171455 env[1104]: time="2023-10-02T19:29:16.171403381Z" level=info msg="shim disconnected" id=9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260 Oct 2 19:29:16.171455 env[1104]: time="2023-10-02T19:29:16.171453317Z" level=warning msg="cleaning up after shim disconnected" id=9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260 namespace=k8s.io Oct 2 19:29:16.171455 env[1104]: time="2023-10-02T19:29:16.171461523Z" level=info msg="cleaning up dead shim" Oct 2 19:29:16.177772 env[1104]: time="2023-10-02T19:29:16.177702936Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3053 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:29:16Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:29:16.178013 env[1104]: time="2023-10-02T19:29:16.177950660Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:29:16.178217 env[1104]: time="2023-10-02T19:29:16.178159329Z" level=error msg="Failed to pipe stderr of container \"9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260\"" error="reading from a closed fifo" Oct 2 19:29:16.178286 env[1104]: time="2023-10-02T19:29:16.178241977Z" level=error msg="Failed to pipe stdout of container \"9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260\"" error="reading from a closed fifo" Oct 2 19:29:16.180702 env[1104]: time="2023-10-02T19:29:16.180645957Z" level=error msg="StartContainer for \"9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:29:16.180913 kubelet[1969]: E1002 19:29:16.180870 1969 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260" Oct 2 19:29:16.181219 kubelet[1969]: E1002 19:29:16.180981 1969 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:29:16.181219 kubelet[1969]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:29:16.181219 kubelet[1969]: rm /hostbin/cilium-mount Oct 2 19:29:16.181219 kubelet[1969]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ch592,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-wlq8x_kube-system(479475a0-f791-44dd-a932-6ef5297dc8bb): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:29:16.181219 kubelet[1969]: E1002 19:29:16.181016 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wlq8x" podUID=479475a0-f791-44dd-a932-6ef5297dc8bb Oct 2 19:29:17.030604 kubelet[1969]: E1002 19:29:17.030536 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:17.032998 env[1104]: time="2023-10-02T19:29:17.032941980Z" level=info msg="CreateContainer within sandbox \"5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:29:17.045122 env[1104]: time="2023-10-02T19:29:17.045063039Z" level=info msg="CreateContainer within sandbox \"5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015\"" Oct 2 19:29:17.046230 env[1104]: time="2023-10-02T19:29:17.046197389Z" level=info msg="StartContainer for \"a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015\"" Oct 2 19:29:17.063773 systemd[1]: Started cri-containerd-a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015.scope. Oct 2 19:29:17.070666 systemd[1]: cri-containerd-a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015.scope: Deactivated successfully. Oct 2 19:29:17.070930 systemd[1]: Stopped cri-containerd-a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015.scope. Oct 2 19:29:17.079951 env[1104]: time="2023-10-02T19:29:17.079888827Z" level=info msg="shim disconnected" id=a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015 Oct 2 19:29:17.079951 env[1104]: time="2023-10-02T19:29:17.079952338Z" level=warning msg="cleaning up after shim disconnected" id=a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015 namespace=k8s.io Oct 2 19:29:17.080200 env[1104]: time="2023-10-02T19:29:17.079964622Z" level=info msg="cleaning up dead shim" Oct 2 19:29:17.087052 env[1104]: time="2023-10-02T19:29:17.086995393Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3089 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:29:17Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:29:17.087341 env[1104]: time="2023-10-02T19:29:17.087274127Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:29:17.087667 env[1104]: time="2023-10-02T19:29:17.087549784Z" level=error msg="Failed to pipe stdout of container \"a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015\"" error="reading from a closed fifo" Oct 2 19:29:17.087844 env[1104]: time="2023-10-02T19:29:17.087790155Z" level=error msg="Failed to pipe stderr of container \"a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015\"" error="reading from a closed fifo" Oct 2 19:29:17.090310 env[1104]: time="2023-10-02T19:29:17.090264468Z" level=error msg="StartContainer for \"a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:29:17.090580 kubelet[1969]: E1002 19:29:17.090533 1969 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015" Oct 2 19:29:17.090681 kubelet[1969]: E1002 19:29:17.090658 1969 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:29:17.090681 kubelet[1969]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:29:17.090681 kubelet[1969]: rm /hostbin/cilium-mount Oct 2 19:29:17.090681 kubelet[1969]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ch592,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-wlq8x_kube-system(479475a0-f791-44dd-a932-6ef5297dc8bb): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:29:17.090850 kubelet[1969]: E1002 19:29:17.090692 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wlq8x" podUID=479475a0-f791-44dd-a932-6ef5297dc8bb Oct 2 19:29:17.712571 kubelet[1969]: E1002 19:29:17.712531 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:18.033333 kubelet[1969]: I1002 19:29:18.033193 1969 scope.go:115] "RemoveContainer" containerID="9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260" Oct 2 19:29:18.033456 kubelet[1969]: I1002 19:29:18.033446 1969 scope.go:115] "RemoveContainer" containerID="9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260" Oct 2 19:29:18.034485 env[1104]: time="2023-10-02T19:29:18.034228719Z" level=info msg="RemoveContainer for \"9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260\"" Oct 2 19:29:18.034759 env[1104]: time="2023-10-02T19:29:18.034506982Z" level=info msg="RemoveContainer for \"9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260\"" Oct 2 19:29:18.034759 env[1104]: time="2023-10-02T19:29:18.034595631Z" level=error msg="RemoveContainer for \"9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260\" failed" error="failed to set removing state for container \"9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260\": container is already in removing state" Oct 2 19:29:18.034826 kubelet[1969]: E1002 19:29:18.034733 1969 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260\": container is already in removing state" containerID="9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260" Oct 2 19:29:18.034826 kubelet[1969]: E1002 19:29:18.034766 1969 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260": container is already in removing state; Skipping pod "cilium-wlq8x_kube-system(479475a0-f791-44dd-a932-6ef5297dc8bb)" Oct 2 19:29:18.034929 kubelet[1969]: E1002 19:29:18.034830 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:18.036585 kubelet[1969]: E1002 19:29:18.035102 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-wlq8x_kube-system(479475a0-f791-44dd-a932-6ef5297dc8bb)\"" pod="kube-system/cilium-wlq8x" podUID=479475a0-f791-44dd-a932-6ef5297dc8bb Oct 2 19:29:18.037440 env[1104]: time="2023-10-02T19:29:18.037395267Z" level=info msg="RemoveContainer for \"9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260\" returns successfully" Oct 2 19:29:18.041111 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015-rootfs.mount: Deactivated successfully. Oct 2 19:29:19.036311 kubelet[1969]: E1002 19:29:19.036285 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:19.036659 kubelet[1969]: E1002 19:29:19.036515 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-wlq8x_kube-system(479475a0-f791-44dd-a932-6ef5297dc8bb)\"" pod="kube-system/cilium-wlq8x" podUID=479475a0-f791-44dd-a932-6ef5297dc8bb Oct 2 19:29:19.277349 kubelet[1969]: W1002 19:29:19.277306 1969 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod479475a0_f791_44dd_a932_6ef5297dc8bb.slice/cri-containerd-9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260.scope WatchSource:0}: container "9a091a91c1cb0fbcee29ab40cd1079d0dec0e67fd7961174dd858fa45fbad260" in namespace "k8s.io": not found Oct 2 19:29:22.382554 kubelet[1969]: W1002 19:29:22.382509 1969 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod479475a0_f791_44dd_a932_6ef5297dc8bb.slice/cri-containerd-a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015.scope WatchSource:0}: task a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015 not found: not found Oct 2 19:29:22.713695 kubelet[1969]: E1002 19:29:22.713601 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:25.594227 kubelet[1969]: E1002 19:29:25.594187 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:27.240000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:27.241989 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 2 19:29:27.242143 kernel: audit: type=1400 audit(1696274967.240:1340): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:27.240000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002791ec0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:29:27.247457 kernel: audit: type=1300 audit(1696274967.240:1340): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002791ec0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:29:27.247573 kernel: audit: type=1327 audit(1696274967.240:1340): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:27.240000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:27.240000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:27.252565 kernel: audit: type=1400 audit(1696274967.240:1341): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:27.252643 kernel: audit: type=1300 audit(1696274967.240:1341): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026198f0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:29:27.240000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026198f0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:29:27.240000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:27.258522 kernel: audit: type=1327 audit(1696274967.240:1341): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:27.426000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:27.426000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009f1b140 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:29:27.431623 kernel: audit: type=1400 audit(1696274967.426:1342): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:27.431703 kernel: audit: type=1300 audit(1696274967.426:1342): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009f1b140 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:29:27.431733 kernel: audit: type=1327 audit(1696274967.426:1342): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:29:27.426000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:29:27.434226 kernel: audit: type=1400 audit(1696274967.426:1343): avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:27.426000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:27.426000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:27.426000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0099a3aa0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:29:27.426000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00af86020 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:29:27.426000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:29:27.426000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:29:27.426000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:27.426000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009f1b1a0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:29:27.426000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:29:27.426000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:27.426000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009f1b260 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:29:27.426000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:29:27.426000 audit[1845]: AVC avc: denied { watch } for pid=1845 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6800 scontext=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:27.426000 audit[1845]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c009de1ce0 a2=fc6 a3=0 items=0 ppid=1702 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c348,c429 key=(null) Oct 2 19:29:27.426000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:29:27.715063 kubelet[1969]: E1002 19:29:27.714977 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:31.594752 kubelet[1969]: E1002 19:29:31.594641 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:31.596781 env[1104]: time="2023-10-02T19:29:31.596737758Z" level=info msg="CreateContainer within sandbox \"5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:29:31.610282 env[1104]: time="2023-10-02T19:29:31.610199494Z" level=info msg="CreateContainer within sandbox \"5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987\"" Oct 2 19:29:31.610979 env[1104]: time="2023-10-02T19:29:31.610928215Z" level=info msg="StartContainer for \"2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987\"" Oct 2 19:29:31.631394 systemd[1]: Started cri-containerd-2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987.scope. Oct 2 19:29:31.640538 systemd[1]: cri-containerd-2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987.scope: Deactivated successfully. Oct 2 19:29:31.640899 systemd[1]: Stopped cri-containerd-2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987.scope. Oct 2 19:29:31.644201 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987-rootfs.mount: Deactivated successfully. Oct 2 19:29:31.652183 env[1104]: time="2023-10-02T19:29:31.652128641Z" level=info msg="shim disconnected" id=2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987 Oct 2 19:29:31.652183 env[1104]: time="2023-10-02T19:29:31.652172064Z" level=warning msg="cleaning up after shim disconnected" id=2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987 namespace=k8s.io Oct 2 19:29:31.652183 env[1104]: time="2023-10-02T19:29:31.652181372Z" level=info msg="cleaning up dead shim" Oct 2 19:29:31.659090 env[1104]: time="2023-10-02T19:29:31.659045530Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3129 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:29:31Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:29:31.659323 env[1104]: time="2023-10-02T19:29:31.659268275Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:29:31.659524 env[1104]: time="2023-10-02T19:29:31.659458457Z" level=error msg="Failed to pipe stdout of container \"2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987\"" error="reading from a closed fifo" Oct 2 19:29:31.659600 env[1104]: time="2023-10-02T19:29:31.659463797Z" level=error msg="Failed to pipe stderr of container \"2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987\"" error="reading from a closed fifo" Oct 2 19:29:31.663809 env[1104]: time="2023-10-02T19:29:31.663744165Z" level=error msg="StartContainer for \"2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:29:31.664098 kubelet[1969]: E1002 19:29:31.664064 1969 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987" Oct 2 19:29:31.664223 kubelet[1969]: E1002 19:29:31.664195 1969 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:29:31.664223 kubelet[1969]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:29:31.664223 kubelet[1969]: rm /hostbin/cilium-mount Oct 2 19:29:31.664223 kubelet[1969]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ch592,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-wlq8x_kube-system(479475a0-f791-44dd-a932-6ef5297dc8bb): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:29:31.664521 kubelet[1969]: E1002 19:29:31.664245 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wlq8x" podUID=479475a0-f791-44dd-a932-6ef5297dc8bb Oct 2 19:29:32.063931 kubelet[1969]: I1002 19:29:32.063804 1969 scope.go:115] "RemoveContainer" containerID="a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015" Oct 2 19:29:32.064259 kubelet[1969]: I1002 19:29:32.064192 1969 scope.go:115] "RemoveContainer" containerID="a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015" Oct 2 19:29:32.066104 env[1104]: time="2023-10-02T19:29:32.066063877Z" level=info msg="RemoveContainer for \"a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015\"" Oct 2 19:29:32.067213 env[1104]: time="2023-10-02T19:29:32.067161020Z" level=info msg="RemoveContainer for \"a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015\"" Oct 2 19:29:32.067357 env[1104]: time="2023-10-02T19:29:32.067283484Z" level=error msg="RemoveContainer for \"a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015\" failed" error="failed to set removing state for container \"a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015\": container is already in removing state" Oct 2 19:29:32.067575 kubelet[1969]: E1002 19:29:32.067527 1969 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015\": container is already in removing state" containerID="a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015" Oct 2 19:29:32.067642 kubelet[1969]: E1002 19:29:32.067589 1969 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015": container is already in removing state; Skipping pod "cilium-wlq8x_kube-system(479475a0-f791-44dd-a932-6ef5297dc8bb)" Oct 2 19:29:32.067697 kubelet[1969]: E1002 19:29:32.067657 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:32.067966 kubelet[1969]: E1002 19:29:32.067940 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-wlq8x_kube-system(479475a0-f791-44dd-a932-6ef5297dc8bb)\"" pod="kube-system/cilium-wlq8x" podUID=479475a0-f791-44dd-a932-6ef5297dc8bb Oct 2 19:29:32.071471 env[1104]: time="2023-10-02T19:29:32.071435806Z" level=info msg="RemoveContainer for \"a8fe8fbc3819071a1619b0bce8772e166cbc17b5f56265f314f359eb4f154015\" returns successfully" Oct 2 19:29:32.716495 kubelet[1969]: E1002 19:29:32.716451 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:34.758162 kubelet[1969]: W1002 19:29:34.758112 1969 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod479475a0_f791_44dd_a932_6ef5297dc8bb.slice/cri-containerd-2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987.scope WatchSource:0}: task 2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987 not found: not found Oct 2 19:29:35.595073 kubelet[1969]: E1002 19:29:35.595024 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:35.788000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:35.789635 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:29:35.789688 kernel: audit: type=1400 audit(1696274975.788:1348): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:35.788000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0001a0f40 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:29:35.794904 kernel: audit: type=1300 audit(1696274975.788:1348): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0001a0f40 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:29:35.794935 kernel: audit: type=1327 audit(1696274975.788:1348): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:35.788000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:35.797421 kernel: audit: type=1400 audit(1696274975.788:1349): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:35.788000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:35.799723 kernel: audit: type=1300 audit(1696274975.788:1349): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a0e280 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:29:35.788000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a0e280 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:29:35.788000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:35.805318 kernel: audit: type=1327 audit(1696274975.788:1349): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:35.805350 kernel: audit: type=1400 audit(1696274975.790:1350): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:35.790000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:35.790000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a0eb00 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:29:35.810790 kernel: audit: type=1300 audit(1696274975.790:1350): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a0eb00 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:29:35.810829 kernel: audit: type=1327 audit(1696274975.790:1350): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:35.790000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:35.790000 audit[1856]: AVC avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:35.815787 kernel: audit: type=1400 audit(1696274975.790:1351): avc: denied { watch } for pid=1856 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:35.790000 audit[1856]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d745a0 a2=fc6 a3=0 items=0 ppid=1728 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c982 key=(null) Oct 2 19:29:35.790000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:37.717828 kubelet[1969]: E1002 19:29:37.717792 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:38.596267 kubelet[1969]: E1002 19:29:38.596226 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:41.129043 update_engine[1090]: I1002 19:29:41.128981 1090 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:29:41.129043 update_engine[1090]: I1002 19:29:41.129029 1090 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:29:41.129815 update_engine[1090]: I1002 19:29:41.129791 1090 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:29:41.130106 update_engine[1090]: I1002 19:29:41.130084 1090 omaha_request_params.cc:62] Current group set to lts Oct 2 19:29:41.131590 update_engine[1090]: I1002 19:29:41.131569 1090 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:29:41.131590 update_engine[1090]: I1002 19:29:41.131579 1090 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:29:41.131590 update_engine[1090]: I1002 19:29:41.131592 1090 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:29:41.131684 update_engine[1090]: I1002 19:29:41.131613 1090 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:29:41.131684 update_engine[1090]: I1002 19:29:41.131652 1090 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:29:41.131684 update_engine[1090]: I1002 19:29:41.131655 1090 omaha_request_action.cc:269] Request: Oct 2 19:29:41.131684 update_engine[1090]: Oct 2 19:29:41.131684 update_engine[1090]: Oct 2 19:29:41.131684 update_engine[1090]: Oct 2 19:29:41.131684 update_engine[1090]: Oct 2 19:29:41.131684 update_engine[1090]: Oct 2 19:29:41.131684 update_engine[1090]: Oct 2 19:29:41.131684 update_engine[1090]: Oct 2 19:29:41.131684 update_engine[1090]: Oct 2 19:29:41.131684 update_engine[1090]: I1002 19:29:41.131659 1090 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:29:41.131992 locksmithd[1132]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:29:41.134164 update_engine[1090]: I1002 19:29:41.134137 1090 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:29:41.134352 update_engine[1090]: I1002 19:29:41.134326 1090 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:29:41.594720 kubelet[1969]: E1002 19:29:41.594689 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:42.320081 update_engine[1090]: I1002 19:29:42.320017 1090 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:29:42.320442 update_engine[1090]: I1002 19:29:42.320189 1090 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:29:42.320442 update_engine[1090]: I1002 19:29:42.320269 1090 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:29:42.674389 update_engine[1090]: I1002 19:29:42.674336 1090 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:29:42.675928 update_engine[1090]: I1002 19:29:42.675899 1090 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:29:42.675928 update_engine[1090]: I1002 19:29:42.675920 1090 omaha_request_action.cc:619] Omaha request response: Oct 2 19:29:42.675928 update_engine[1090]: Oct 2 19:29:42.680291 update_engine[1090]: I1002 19:29:42.680250 1090 omaha_request_action.cc:409] No update. Oct 2 19:29:42.680291 update_engine[1090]: I1002 19:29:42.680280 1090 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:29:42.680291 update_engine[1090]: I1002 19:29:42.680287 1090 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:29:42.680291 update_engine[1090]: I1002 19:29:42.680292 1090 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:29:42.680291 update_engine[1090]: I1002 19:29:42.680296 1090 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:29:42.680522 update_engine[1090]: I1002 19:29:42.680301 1090 update_attempter.cc:302] Processing Done. Oct 2 19:29:42.680522 update_engine[1090]: I1002 19:29:42.680315 1090 update_attempter.cc:338] No update. Oct 2 19:29:42.680522 update_engine[1090]: I1002 19:29:42.680326 1090 update_check_scheduler.cc:74] Next update check in 47m51s Oct 2 19:29:42.680710 locksmithd[1132]: LastCheckedTime=1696274982 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:29:42.718988 kubelet[1969]: E1002 19:29:42.718965 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:43.595137 kubelet[1969]: E1002 19:29:43.595082 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:43.595389 kubelet[1969]: E1002 19:29:43.595370 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-wlq8x_kube-system(479475a0-f791-44dd-a932-6ef5297dc8bb)\"" pod="kube-system/cilium-wlq8x" podUID=479475a0-f791-44dd-a932-6ef5297dc8bb Oct 2 19:29:47.720379 kubelet[1969]: E1002 19:29:47.720346 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:52.721176 kubelet[1969]: E1002 19:29:52.721140 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:55.594668 kubelet[1969]: E1002 19:29:55.594606 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:55.597088 env[1104]: time="2023-10-02T19:29:55.597044101Z" level=info msg="CreateContainer within sandbox \"5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:29:55.620122 env[1104]: time="2023-10-02T19:29:55.620060070Z" level=info msg="CreateContainer within sandbox \"5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81\"" Oct 2 19:29:55.620738 env[1104]: time="2023-10-02T19:29:55.620687414Z" level=info msg="StartContainer for \"ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81\"" Oct 2 19:29:55.638500 systemd[1]: run-containerd-runc-k8s.io-ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81-runc.VgGy7s.mount: Deactivated successfully. Oct 2 19:29:55.643225 systemd[1]: Started cri-containerd-ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81.scope. Oct 2 19:29:55.651162 systemd[1]: cri-containerd-ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81.scope: Deactivated successfully. Oct 2 19:29:55.651447 systemd[1]: Stopped cri-containerd-ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81.scope. Oct 2 19:29:55.660508 env[1104]: time="2023-10-02T19:29:55.660461191Z" level=info msg="shim disconnected" id=ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81 Oct 2 19:29:55.660734 env[1104]: time="2023-10-02T19:29:55.660511396Z" level=warning msg="cleaning up after shim disconnected" id=ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81 namespace=k8s.io Oct 2 19:29:55.660734 env[1104]: time="2023-10-02T19:29:55.660521366Z" level=info msg="cleaning up dead shim" Oct 2 19:29:55.668111 env[1104]: time="2023-10-02T19:29:55.668054501Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:29:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3170 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:29:55Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:29:55.668419 env[1104]: time="2023-10-02T19:29:55.668352057Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 19:29:55.672701 env[1104]: time="2023-10-02T19:29:55.672629431Z" level=error msg="Failed to pipe stdout of container \"ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81\"" error="reading from a closed fifo" Oct 2 19:29:55.674650 env[1104]: time="2023-10-02T19:29:55.674602974Z" level=error msg="Failed to pipe stderr of container \"ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81\"" error="reading from a closed fifo" Oct 2 19:29:55.676379 env[1104]: time="2023-10-02T19:29:55.676309229Z" level=error msg="StartContainer for \"ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:29:55.676621 kubelet[1969]: E1002 19:29:55.676592 1969 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81" Oct 2 19:29:55.676702 kubelet[1969]: E1002 19:29:55.676696 1969 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:29:55.676702 kubelet[1969]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:29:55.676702 kubelet[1969]: rm /hostbin/cilium-mount Oct 2 19:29:55.676702 kubelet[1969]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ch592,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-wlq8x_kube-system(479475a0-f791-44dd-a932-6ef5297dc8bb): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:29:55.676851 kubelet[1969]: E1002 19:29:55.676728 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wlq8x" podUID=479475a0-f791-44dd-a932-6ef5297dc8bb Oct 2 19:29:56.103262 kubelet[1969]: I1002 19:29:56.103238 1969 scope.go:115] "RemoveContainer" containerID="2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987" Oct 2 19:29:56.104596 kubelet[1969]: I1002 19:29:56.103611 1969 scope.go:115] "RemoveContainer" containerID="2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987" Oct 2 19:29:56.104782 env[1104]: time="2023-10-02T19:29:56.104546103Z" level=info msg="RemoveContainer for \"2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987\"" Oct 2 19:29:56.105088 env[1104]: time="2023-10-02T19:29:56.105035944Z" level=info msg="RemoveContainer for \"2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987\"" Oct 2 19:29:56.105288 env[1104]: time="2023-10-02T19:29:56.105131556Z" level=error msg="RemoveContainer for \"2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987\" failed" error="failed to set removing state for container \"2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987\": container is already in removing state" Oct 2 19:29:56.105333 kubelet[1969]: E1002 19:29:56.105318 1969 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987\": container is already in removing state" containerID="2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987" Oct 2 19:29:56.105375 kubelet[1969]: E1002 19:29:56.105355 1969 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987": container is already in removing state; Skipping pod "cilium-wlq8x_kube-system(479475a0-f791-44dd-a932-6ef5297dc8bb)" Oct 2 19:29:56.105446 kubelet[1969]: E1002 19:29:56.105423 1969 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:29:56.105708 kubelet[1969]: E1002 19:29:56.105689 1969 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-wlq8x_kube-system(479475a0-f791-44dd-a932-6ef5297dc8bb)\"" pod="kube-system/cilium-wlq8x" podUID=479475a0-f791-44dd-a932-6ef5297dc8bb Oct 2 19:29:56.107842 env[1104]: time="2023-10-02T19:29:56.107798827Z" level=info msg="RemoveContainer for \"2fd0e861a76a2a8e92fe00f1d96bc61ceac21a0dc61d5b820ac1a38283c35987\" returns successfully" Oct 2 19:29:56.607372 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81-rootfs.mount: Deactivated successfully. Oct 2 19:29:57.722728 kubelet[1969]: E1002 19:29:57.722686 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:58.765648 kubelet[1969]: W1002 19:29:58.765596 1969 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod479475a0_f791_44dd_a932_6ef5297dc8bb.slice/cri-containerd-ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81.scope WatchSource:0}: task ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81 not found: not found Oct 2 19:30:02.723610 kubelet[1969]: E1002 19:30:02.723575 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:06.673287 env[1104]: time="2023-10-02T19:30:06.673076076Z" level=info msg="StopPodSandbox for \"5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b\"" Oct 2 19:30:06.673287 env[1104]: time="2023-10-02T19:30:06.673158543Z" level=info msg="Container to stop \"ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:30:06.675352 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b-shm.mount: Deactivated successfully. Oct 2 19:30:06.681974 systemd[1]: cri-containerd-5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b.scope: Deactivated successfully. Oct 2 19:30:06.683836 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:30:06.683907 kernel: audit: type=1334 audit(1696275006.681:1352): prog-id=125 op=UNLOAD Oct 2 19:30:06.681000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:30:06.685000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:30:06.687658 kernel: audit: type=1334 audit(1696275006.685:1353): prog-id=128 op=UNLOAD Oct 2 19:30:06.699921 sshd[2977]: pam_unix(sshd:session): session closed for user core Oct 2 19:30:06.700000 audit[2977]: USER_END pid=2977 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:06.700000 audit[2977]: CRED_DISP pid=2977 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:06.706828 systemd[1]: sshd@29-10.0.0.8:22-10.0.0.1:59764.service: Deactivated successfully. Oct 2 19:30:06.707223 kernel: audit: type=1106 audit(1696275006.700:1354): pid=2977 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:06.707288 kernel: audit: type=1104 audit(1696275006.700:1355): pid=2977 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:06.707468 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:30:06.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.8:22-10.0.0.1:59764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:06.710597 kernel: audit: type=1131 audit(1696275006.706:1356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.8:22-10.0.0.1:59764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:06.707951 systemd-logind[1089]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:30:06.708539 systemd-logind[1089]: Removed session 30. Oct 2 19:30:06.710237 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b-rootfs.mount: Deactivated successfully. Oct 2 19:30:06.720966 env[1104]: time="2023-10-02T19:30:06.720017299Z" level=info msg="shim disconnected" id=5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b Oct 2 19:30:06.720966 env[1104]: time="2023-10-02T19:30:06.720073025Z" level=warning msg="cleaning up after shim disconnected" id=5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b namespace=k8s.io Oct 2 19:30:06.720966 env[1104]: time="2023-10-02T19:30:06.720084227Z" level=info msg="cleaning up dead shim" Oct 2 19:30:06.726574 env[1104]: time="2023-10-02T19:30:06.726515893Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3202 runtime=io.containerd.runc.v2\n" Oct 2 19:30:06.726802 env[1104]: time="2023-10-02T19:30:06.726775657Z" level=info msg="TearDown network for sandbox \"5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b\" successfully" Oct 2 19:30:06.726802 env[1104]: time="2023-10-02T19:30:06.726798621Z" level=info msg="StopPodSandbox for \"5ae0d60239c0b79501fd2dc34c6362142ee288dfbfb0ee7a50000e72932e126b\" returns successfully" Oct 2 19:30:06.851674 kubelet[1969]: I1002 19:30:06.851617 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-hostproc\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.851674 kubelet[1969]: I1002 19:30:06.851653 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-host-proc-sys-net\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.851674 kubelet[1969]: I1002 19:30:06.851669 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-cni-path\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.851674 kubelet[1969]: I1002 19:30:06.851689 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/479475a0-f791-44dd-a932-6ef5297dc8bb-hubble-tls\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851705 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-cgroup\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851720 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-lib-modules\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851731 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851738 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-ipsec-secrets\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851775 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-host-proc-sys-kernel\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851765 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-cni-path" (OuterVolumeSpecName: "cni-path") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851797 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/479475a0-f791-44dd-a932-6ef5297dc8bb-clustermesh-secrets\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851816 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-ch592\" (UniqueName: \"kubernetes.io/projected/479475a0-f791-44dd-a932-6ef5297dc8bb-kube-api-access-ch592\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851832 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-xtables-lock\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851836 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851862 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-config-path\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851865 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-hostproc" (OuterVolumeSpecName: "hostproc") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851880 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-etc-cni-netd\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851896 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-run\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851910 1969 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-bpf-maps\") pod \"479475a0-f791-44dd-a932-6ef5297dc8bb\" (UID: \"479475a0-f791-44dd-a932-6ef5297dc8bb\") " Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851934 1969 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851943 1969 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851952 1969 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.852133 kubelet[1969]: I1002 19:30:06.851961 1969 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.852576 kubelet[1969]: I1002 19:30:06.851974 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:06.852576 kubelet[1969]: I1002 19:30:06.851988 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:06.852576 kubelet[1969]: W1002 19:30:06.852097 1969 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/479475a0-f791-44dd-a932-6ef5297dc8bb/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:30:06.852655 kubelet[1969]: I1002 19:30:06.852633 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:06.852680 kubelet[1969]: I1002 19:30:06.852656 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:06.852680 kubelet[1969]: I1002 19:30:06.852670 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:06.852734 kubelet[1969]: I1002 19:30:06.852682 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:06.854877 systemd[1]: var-lib-kubelet-pods-479475a0\x2df791\x2d44dd\x2da932\x2d6ef5297dc8bb-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:30:06.855632 kubelet[1969]: I1002 19:30:06.854901 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/479475a0-f791-44dd-a932-6ef5297dc8bb-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:30:06.855632 kubelet[1969]: I1002 19:30:06.854949 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/479475a0-f791-44dd-a932-6ef5297dc8bb-kube-api-access-ch592" (OuterVolumeSpecName: "kube-api-access-ch592") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "kube-api-access-ch592". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:30:06.855632 kubelet[1969]: I1002 19:30:06.855063 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:30:06.856026 kubelet[1969]: I1002 19:30:06.855999 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:30:06.856168 systemd[1]: var-lib-kubelet-pods-479475a0\x2df791\x2d44dd\x2da932\x2d6ef5297dc8bb-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:30:06.856232 systemd[1]: var-lib-kubelet-pods-479475a0\x2df791\x2d44dd\x2da932\x2d6ef5297dc8bb-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dch592.mount: Deactivated successfully. Oct 2 19:30:06.856693 kubelet[1969]: I1002 19:30:06.856650 1969 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/479475a0-f791-44dd-a932-6ef5297dc8bb-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "479475a0-f791-44dd-a932-6ef5297dc8bb" (UID: "479475a0-f791-44dd-a932-6ef5297dc8bb"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:30:06.857535 systemd[1]: var-lib-kubelet-pods-479475a0\x2df791\x2d44dd\x2da932\x2d6ef5297dc8bb-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:30:06.952933 kubelet[1969]: I1002 19:30:06.952844 1969 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.952933 kubelet[1969]: I1002 19:30:06.952890 1969 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.952933 kubelet[1969]: I1002 19:30:06.952901 1969 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/479475a0-f791-44dd-a932-6ef5297dc8bb-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.952933 kubelet[1969]: I1002 19:30:06.952915 1969 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-ch592\" (UniqueName: \"kubernetes.io/projected/479475a0-f791-44dd-a932-6ef5297dc8bb-kube-api-access-ch592\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.952933 kubelet[1969]: I1002 19:30:06.952925 1969 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.952933 kubelet[1969]: I1002 19:30:06.952935 1969 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.953120 kubelet[1969]: I1002 19:30:06.952945 1969 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.953120 kubelet[1969]: I1002 19:30:06.952955 1969 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.953120 kubelet[1969]: I1002 19:30:06.952964 1969 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.953120 kubelet[1969]: I1002 19:30:06.952974 1969 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/479475a0-f791-44dd-a932-6ef5297dc8bb-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:06.953120 kubelet[1969]: I1002 19:30:06.952984 1969 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/479475a0-f791-44dd-a932-6ef5297dc8bb-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:30:07.123722 kubelet[1969]: I1002 19:30:07.123698 1969 scope.go:115] "RemoveContainer" containerID="ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81" Oct 2 19:30:07.124459 env[1104]: time="2023-10-02T19:30:07.124415788Z" level=info msg="RemoveContainer for \"ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81\"" Oct 2 19:30:07.126923 systemd[1]: Removed slice kubepods-burstable-pod479475a0_f791_44dd_a932_6ef5297dc8bb.slice. Oct 2 19:30:07.127300 env[1104]: time="2023-10-02T19:30:07.127274336Z" level=info msg="RemoveContainer for \"ff983f26ec2ed49d2cb4a532316614bfb9537b1cb5bff4b065a744032fbd3f81\" returns successfully" Oct 2 19:30:07.724743 kubelet[1969]: E1002 19:30:07.724712 1969 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"