Oct 2 19:38:15.784326 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:38:15.784351 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:38:15.784377 kernel: BIOS-provided physical RAM map: Oct 2 19:38:15.784385 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:38:15.784393 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:38:15.784401 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:38:15.784411 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdcfff] usable Oct 2 19:38:15.784419 kernel: BIOS-e820: [mem 0x000000009cfdd000-0x000000009cffffff] reserved Oct 2 19:38:15.784429 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Oct 2 19:38:15.784437 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:38:15.784445 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Oct 2 19:38:15.784453 kernel: NX (Execute Disable) protection: active Oct 2 19:38:15.784461 kernel: SMBIOS 2.8 present. Oct 2 19:38:15.784470 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Oct 2 19:38:15.784481 kernel: Hypervisor detected: KVM Oct 2 19:38:15.784490 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:38:15.784498 kernel: kvm-clock: cpu 0, msr 27f8a001, primary cpu clock Oct 2 19:38:15.784517 kernel: kvm-clock: using sched offset of 2098296415 cycles Oct 2 19:38:15.784526 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:38:15.784535 kernel: tsc: Detected 2794.748 MHz processor Oct 2 19:38:15.784544 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:38:15.784553 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:38:15.784561 kernel: last_pfn = 0x9cfdd max_arch_pfn = 0x400000000 Oct 2 19:38:15.784583 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:38:15.784593 kernel: Using GB pages for direct mapping Oct 2 19:38:15.784601 kernel: ACPI: Early table checksum verification disabled Oct 2 19:38:15.784610 kernel: ACPI: RSDP 0x00000000000F59C0 000014 (v00 BOCHS ) Oct 2 19:38:15.784617 kernel: ACPI: RSDT 0x000000009CFE1BDD 000034 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:38:15.784635 kernel: ACPI: FACP 0x000000009CFE1A79 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:38:15.784644 kernel: ACPI: DSDT 0x000000009CFE0040 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:38:15.784651 kernel: ACPI: FACS 0x000000009CFE0000 000040 Oct 2 19:38:15.784659 kernel: ACPI: APIC 0x000000009CFE1AED 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:38:15.784669 kernel: ACPI: HPET 0x000000009CFE1B7D 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:38:15.784677 kernel: ACPI: WAET 0x000000009CFE1BB5 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:38:15.784695 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe1a79-0x9cfe1aec] Oct 2 19:38:15.784703 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe1a78] Oct 2 19:38:15.784711 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Oct 2 19:38:15.784719 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe1aed-0x9cfe1b7c] Oct 2 19:38:15.784727 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe1b7d-0x9cfe1bb4] Oct 2 19:38:15.784736 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe1bb5-0x9cfe1bdc] Oct 2 19:38:15.784757 kernel: No NUMA configuration found Oct 2 19:38:15.784767 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdcfff] Oct 2 19:38:15.784775 kernel: NODE_DATA(0) allocated [mem 0x9cfd7000-0x9cfdcfff] Oct 2 19:38:15.784784 kernel: Zone ranges: Oct 2 19:38:15.784793 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:38:15.784808 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdcfff] Oct 2 19:38:15.784822 kernel: Normal empty Oct 2 19:38:15.784830 kernel: Movable zone start for each node Oct 2 19:38:15.784839 kernel: Early memory node ranges Oct 2 19:38:15.784847 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:38:15.784856 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdcfff] Oct 2 19:38:15.784874 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdcfff] Oct 2 19:38:15.784883 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:38:15.784892 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:38:15.784900 kernel: On node 0, zone DMA32: 12323 pages in unavailable ranges Oct 2 19:38:15.784910 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 2 19:38:15.784919 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:38:15.784927 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:38:15.784936 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:38:15.784944 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:38:15.784953 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:38:15.784961 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:38:15.784970 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:38:15.784988 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:38:15.784999 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:38:15.785007 kernel: TSC deadline timer available Oct 2 19:38:15.785016 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Oct 2 19:38:15.785024 kernel: kvm-guest: KVM setup pv remote TLB flush Oct 2 19:38:15.785050 kernel: kvm-guest: setup PV sched yield Oct 2 19:38:15.785060 kernel: [mem 0x9d000000-0xfeffbfff] available for PCI devices Oct 2 19:38:15.785069 kernel: Booting paravirtualized kernel on KVM Oct 2 19:38:15.785078 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:38:15.785098 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Oct 2 19:38:15.785110 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u524288 Oct 2 19:38:15.785119 kernel: pcpu-alloc: s185624 r8192 d31464 u524288 alloc=1*2097152 Oct 2 19:38:15.785128 kernel: pcpu-alloc: [0] 0 1 2 3 Oct 2 19:38:15.785136 kernel: kvm-guest: setup async PF for cpu 0 Oct 2 19:38:15.785145 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Oct 2 19:38:15.785154 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:38:15.785170 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:38:15.785180 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632733 Oct 2 19:38:15.785204 kernel: Policy zone: DMA32 Oct 2 19:38:15.785215 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:38:15.785227 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:38:15.785237 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:38:15.785246 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:38:15.785255 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:38:15.785265 kernel: Memory: 2438768K/2571756K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 132728K reserved, 0K cma-reserved) Oct 2 19:38:15.785274 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:38:15.785283 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:38:15.785292 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:38:15.785313 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:38:15.785323 kernel: rcu: RCU event tracing is enabled. Oct 2 19:38:15.785332 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:38:15.785342 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:38:15.785351 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:38:15.785360 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:38:15.785369 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:38:15.785388 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Oct 2 19:38:15.785397 kernel: random: crng init done Oct 2 19:38:15.785408 kernel: Console: colour VGA+ 80x25 Oct 2 19:38:15.785417 kernel: printk: console [ttyS0] enabled Oct 2 19:38:15.785426 kernel: ACPI: Core revision 20210730 Oct 2 19:38:15.785435 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Oct 2 19:38:15.785444 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:38:15.785463 kernel: x2apic enabled Oct 2 19:38:15.785472 kernel: Switched APIC routing to physical x2apic. Oct 2 19:38:15.785481 kernel: kvm-guest: setup PV IPIs Oct 2 19:38:15.785490 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 19:38:15.785501 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 19:38:15.785519 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Oct 2 19:38:15.785529 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Oct 2 19:38:15.785538 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Oct 2 19:38:15.785547 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Oct 2 19:38:15.785566 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:38:15.785575 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:38:15.785585 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:38:15.785594 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:38:15.785620 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Oct 2 19:38:15.785629 kernel: RETBleed: Mitigation: untrained return thunk Oct 2 19:38:15.785639 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Oct 2 19:38:15.785659 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Oct 2 19:38:15.785669 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:38:15.785679 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:38:15.785688 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:38:15.785707 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:38:15.785716 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Oct 2 19:38:15.785728 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:38:15.785737 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:38:15.785756 kernel: LSM: Security Framework initializing Oct 2 19:38:15.785765 kernel: SELinux: Initializing. Oct 2 19:38:15.785775 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:38:15.785794 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:38:15.785804 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Oct 2 19:38:15.785815 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Oct 2 19:38:15.785833 kernel: ... version: 0 Oct 2 19:38:15.785843 kernel: ... bit width: 48 Oct 2 19:38:15.785852 kernel: ... generic registers: 6 Oct 2 19:38:15.785861 kernel: ... value mask: 0000ffffffffffff Oct 2 19:38:15.785871 kernel: ... max period: 00007fffffffffff Oct 2 19:38:15.785889 kernel: ... fixed-purpose events: 0 Oct 2 19:38:15.785899 kernel: ... event mask: 000000000000003f Oct 2 19:38:15.785908 kernel: signal: max sigframe size: 1776 Oct 2 19:38:15.785919 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:38:15.785929 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:38:15.785948 kernel: x86: Booting SMP configuration: Oct 2 19:38:15.785957 kernel: .... node #0, CPUs: #1 Oct 2 19:38:15.785966 kernel: kvm-clock: cpu 1, msr 27f8a041, secondary cpu clock Oct 2 19:38:15.785976 kernel: kvm-guest: setup async PF for cpu 1 Oct 2 19:38:15.785995 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Oct 2 19:38:15.786004 kernel: #2 Oct 2 19:38:15.786014 kernel: kvm-clock: cpu 2, msr 27f8a081, secondary cpu clock Oct 2 19:38:15.786024 kernel: kvm-guest: setup async PF for cpu 2 Oct 2 19:38:15.786056 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Oct 2 19:38:15.786065 kernel: #3 Oct 2 19:38:15.786083 kernel: kvm-clock: cpu 3, msr 27f8a0c1, secondary cpu clock Oct 2 19:38:15.786093 kernel: kvm-guest: setup async PF for cpu 3 Oct 2 19:38:15.786103 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Oct 2 19:38:15.786112 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:38:15.786121 kernel: smpboot: Max logical packages: 1 Oct 2 19:38:15.786140 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Oct 2 19:38:15.786150 kernel: devtmpfs: initialized Oct 2 19:38:15.786168 kernel: x86/mm: Memory block size: 128MB Oct 2 19:38:15.786187 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:38:15.786197 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:38:15.786206 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:38:15.786216 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:38:15.786234 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:38:15.786244 kernel: audit: type=2000 audit(1696275495.424:1): state=initialized audit_enabled=0 res=1 Oct 2 19:38:15.786271 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:38:15.786296 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:38:15.786308 kernel: cpuidle: using governor menu Oct 2 19:38:15.786317 kernel: ACPI: bus type PCI registered Oct 2 19:38:15.786326 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:38:15.786336 kernel: dca service started, version 1.12.1 Oct 2 19:38:15.786345 kernel: PCI: Using configuration type 1 for base access Oct 2 19:38:15.786354 kernel: PCI: Using configuration type 1 for extended access Oct 2 19:38:15.786364 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:38:15.786372 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:38:15.786381 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:38:15.786392 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:38:15.786402 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:38:15.786411 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:38:15.786420 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:38:15.786429 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:38:15.786438 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:38:15.786447 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:38:15.786472 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:38:15.786482 kernel: ACPI: Interpreter enabled Oct 2 19:38:15.786493 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 19:38:15.786503 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:38:15.786513 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:38:15.786521 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 19:38:15.786531 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:38:15.786665 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:38:15.786681 kernel: acpiphp: Slot [3] registered Oct 2 19:38:15.786691 kernel: acpiphp: Slot [4] registered Oct 2 19:38:15.786703 kernel: acpiphp: Slot [5] registered Oct 2 19:38:15.786712 kernel: acpiphp: Slot [6] registered Oct 2 19:38:15.786722 kernel: acpiphp: Slot [7] registered Oct 2 19:38:15.786732 kernel: acpiphp: Slot [8] registered Oct 2 19:38:15.786741 kernel: acpiphp: Slot [9] registered Oct 2 19:38:15.786751 kernel: acpiphp: Slot [10] registered Oct 2 19:38:15.786760 kernel: acpiphp: Slot [11] registered Oct 2 19:38:15.786770 kernel: acpiphp: Slot [12] registered Oct 2 19:38:15.786780 kernel: acpiphp: Slot [13] registered Oct 2 19:38:15.786789 kernel: acpiphp: Slot [14] registered Oct 2 19:38:15.786800 kernel: acpiphp: Slot [15] registered Oct 2 19:38:15.786810 kernel: acpiphp: Slot [16] registered Oct 2 19:38:15.786819 kernel: acpiphp: Slot [17] registered Oct 2 19:38:15.786829 kernel: acpiphp: Slot [18] registered Oct 2 19:38:15.786838 kernel: acpiphp: Slot [19] registered Oct 2 19:38:15.786848 kernel: acpiphp: Slot [20] registered Oct 2 19:38:15.786857 kernel: acpiphp: Slot [21] registered Oct 2 19:38:15.786867 kernel: acpiphp: Slot [22] registered Oct 2 19:38:15.786876 kernel: acpiphp: Slot [23] registered Oct 2 19:38:15.786887 kernel: acpiphp: Slot [24] registered Oct 2 19:38:15.786897 kernel: acpiphp: Slot [25] registered Oct 2 19:38:15.786906 kernel: acpiphp: Slot [26] registered Oct 2 19:38:15.786916 kernel: acpiphp: Slot [27] registered Oct 2 19:38:15.786925 kernel: acpiphp: Slot [28] registered Oct 2 19:38:15.786935 kernel: acpiphp: Slot [29] registered Oct 2 19:38:15.786945 kernel: acpiphp: Slot [30] registered Oct 2 19:38:15.786954 kernel: acpiphp: Slot [31] registered Oct 2 19:38:15.786964 kernel: PCI host bridge to bus 0000:00 Oct 2 19:38:15.787078 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:38:15.787174 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:38:15.787256 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:38:15.787334 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Oct 2 19:38:15.787411 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Oct 2 19:38:15.787488 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:38:15.787591 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:38:15.787691 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:38:15.787805 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 19:38:15.787951 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Oct 2 19:38:15.788072 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 19:38:15.788175 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 19:38:15.788268 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 19:38:15.788365 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 19:38:15.788468 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 19:38:15.788558 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Oct 2 19:38:15.788646 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Oct 2 19:38:15.788739 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Oct 2 19:38:15.788826 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Oct 2 19:38:15.788912 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Oct 2 19:38:15.789025 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Oct 2 19:38:15.789145 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:38:15.789258 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:38:15.789351 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc09f] Oct 2 19:38:15.789446 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Oct 2 19:38:15.789544 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Oct 2 19:38:15.789658 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 19:38:15.789755 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 19:38:15.789849 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Oct 2 19:38:15.789940 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Oct 2 19:38:15.790053 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Oct 2 19:38:15.790151 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0a0-0xc0bf] Oct 2 19:38:15.790256 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Oct 2 19:38:15.790347 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Oct 2 19:38:15.790443 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Oct 2 19:38:15.790456 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:38:15.790466 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:38:15.790476 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:38:15.790486 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:38:15.790496 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:38:15.790505 kernel: iommu: Default domain type: Translated Oct 2 19:38:15.790515 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:38:15.790605 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 19:38:15.790700 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:38:15.790792 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 19:38:15.790805 kernel: vgaarb: loaded Oct 2 19:38:15.790815 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:38:15.790825 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:38:15.790835 kernel: PTP clock support registered Oct 2 19:38:15.790845 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:38:15.790854 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:38:15.790866 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:38:15.790876 kernel: e820: reserve RAM buffer [mem 0x9cfdd000-0x9fffffff] Oct 2 19:38:15.790886 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Oct 2 19:38:15.790895 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Oct 2 19:38:15.790905 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:38:15.790915 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:38:15.790925 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:38:15.790934 kernel: pnp: PnP ACPI init Oct 2 19:38:15.791065 kernel: pnp 00:02: [dma 2] Oct 2 19:38:15.791083 kernel: pnp: PnP ACPI: found 6 devices Oct 2 19:38:15.791093 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:38:15.791103 kernel: NET: Registered PF_INET protocol family Oct 2 19:38:15.791112 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:38:15.791122 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:38:15.791132 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:38:15.791142 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:38:15.791152 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:38:15.791171 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:38:15.791180 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:38:15.791190 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:38:15.791200 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:38:15.791209 kernel: NET: Registered PF_XDP protocol family Oct 2 19:38:15.791295 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:38:15.791378 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:38:15.791458 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:38:15.791538 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Oct 2 19:38:15.791622 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Oct 2 19:38:15.791715 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 19:38:15.791805 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:38:15.791898 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:38:15.791911 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:38:15.791921 kernel: Initialise system trusted keyrings Oct 2 19:38:15.791931 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:38:15.791940 kernel: Key type asymmetric registered Oct 2 19:38:15.791952 kernel: Asymmetric key parser 'x509' registered Oct 2 19:38:15.791962 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:38:15.791972 kernel: io scheduler mq-deadline registered Oct 2 19:38:15.791981 kernel: io scheduler kyber registered Oct 2 19:38:15.791991 kernel: io scheduler bfq registered Oct 2 19:38:15.792001 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:38:15.792011 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 19:38:15.792021 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Oct 2 19:38:15.792042 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 19:38:15.792054 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:38:15.792064 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:38:15.792074 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:38:15.792084 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:38:15.792094 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:38:15.792196 kernel: rtc_cmos 00:05: RTC can wake from S4 Oct 2 19:38:15.792211 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:38:15.792292 kernel: rtc_cmos 00:05: registered as rtc0 Oct 2 19:38:15.792385 kernel: rtc_cmos 00:05: setting system clock to 2023-10-02T19:38:15 UTC (1696275495) Oct 2 19:38:15.792471 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Oct 2 19:38:15.792483 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:38:15.792493 kernel: Segment Routing with IPv6 Oct 2 19:38:15.792503 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:38:15.792512 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:38:15.792522 kernel: Key type dns_resolver registered Oct 2 19:38:15.792531 kernel: IPI shorthand broadcast: enabled Oct 2 19:38:15.792541 kernel: sched_clock: Marking stable (336179186, 77081957)->(439270329, -26009186) Oct 2 19:38:15.792553 kernel: registered taskstats version 1 Oct 2 19:38:15.792563 kernel: Loading compiled-in X.509 certificates Oct 2 19:38:15.792573 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:38:15.792582 kernel: Key type .fscrypt registered Oct 2 19:38:15.792592 kernel: Key type fscrypt-provisioning registered Oct 2 19:38:15.792602 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:38:15.792612 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:38:15.792621 kernel: ima: No architecture policies found Oct 2 19:38:15.792632 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:38:15.792642 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:38:15.792652 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:38:15.792661 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:38:15.792671 kernel: Run /init as init process Oct 2 19:38:15.792681 kernel: with arguments: Oct 2 19:38:15.792690 kernel: /init Oct 2 19:38:15.792700 kernel: with environment: Oct 2 19:38:15.792720 kernel: HOME=/ Oct 2 19:38:15.792731 kernel: TERM=linux Oct 2 19:38:15.792742 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:38:15.792755 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:38:15.792768 systemd[1]: Detected virtualization kvm. Oct 2 19:38:15.792779 systemd[1]: Detected architecture x86-64. Oct 2 19:38:15.792790 systemd[1]: Running in initrd. Oct 2 19:38:15.792800 systemd[1]: No hostname configured, using default hostname. Oct 2 19:38:15.792811 systemd[1]: Hostname set to . Oct 2 19:38:15.792823 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:38:15.792834 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:38:15.792845 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:38:15.792856 systemd[1]: Reached target cryptsetup.target. Oct 2 19:38:15.792866 systemd[1]: Reached target paths.target. Oct 2 19:38:15.792877 systemd[1]: Reached target slices.target. Oct 2 19:38:15.792887 systemd[1]: Reached target swap.target. Oct 2 19:38:15.792898 systemd[1]: Reached target timers.target. Oct 2 19:38:15.792911 systemd[1]: Listening on iscsid.socket. Oct 2 19:38:15.792921 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:38:15.792932 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:38:15.792943 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:38:15.792954 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:38:15.792964 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:38:15.792975 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:38:15.792987 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:38:15.792998 systemd[1]: Reached target sockets.target. Oct 2 19:38:15.793009 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:38:15.793020 systemd[1]: Finished network-cleanup.service. Oct 2 19:38:15.793043 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:38:15.793054 systemd[1]: Starting systemd-journald.service... Oct 2 19:38:15.793065 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:38:15.793078 systemd[1]: Starting systemd-resolved.service... Oct 2 19:38:15.793089 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:38:15.793100 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:38:15.793111 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:38:15.793122 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:38:15.793133 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:38:15.793148 systemd-journald[196]: Journal started Oct 2 19:38:15.793207 systemd-journald[196]: Runtime Journal (/run/log/journal/1e3f11e73f8f4aaca8bb4db1ac89d23d) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:38:15.786488 systemd-modules-load[197]: Inserted module 'overlay' Oct 2 19:38:15.792856 systemd-resolved[198]: Positive Trust Anchors: Oct 2 19:38:15.807193 systemd[1]: Started systemd-journald.service. Oct 2 19:38:15.807210 kernel: audit: type=1130 audit(1696275495.803:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.792863 systemd-resolved[198]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:38:15.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.792889 systemd-resolved[198]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:38:15.816123 kernel: audit: type=1130 audit(1696275495.808:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.816141 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:38:15.816157 kernel: Bridge firewalling registered Oct 2 19:38:15.795104 systemd-resolved[198]: Defaulting to hostname 'linux'. Oct 2 19:38:15.817735 kernel: audit: type=1130 audit(1696275495.817:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.811015 systemd[1]: Started systemd-resolved.service. Oct 2 19:38:15.817054 systemd-modules-load[197]: Inserted module 'br_netfilter' Oct 2 19:38:15.820949 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:38:15.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.823244 systemd[1]: Reached target nss-lookup.target. Oct 2 19:38:15.825376 kernel: audit: type=1130 audit(1696275495.822:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.825471 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:38:15.834060 kernel: SCSI subsystem initialized Oct 2 19:38:15.835682 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:38:15.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.839177 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:38:15.840126 kernel: audit: type=1130 audit(1696275495.836:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.846311 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:38:15.846334 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:38:15.846725 dracut-cmdline[217]: dracut-dracut-053 Oct 2 19:38:15.847850 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:38:15.848576 dracut-cmdline[217]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:38:15.851679 systemd-modules-load[197]: Inserted module 'dm_multipath' Oct 2 19:38:15.852247 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:38:15.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.853023 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:38:15.856054 kernel: audit: type=1130 audit(1696275495.852:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.859489 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:38:15.862166 kernel: audit: type=1130 audit(1696275495.859:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.898058 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:38:15.908050 kernel: iscsi: registered transport (tcp) Oct 2 19:38:15.926047 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:38:15.926065 kernel: QLogic iSCSI HBA Driver Oct 2 19:38:15.943679 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:38:15.947228 kernel: audit: type=1130 audit(1696275495.943:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:15.944441 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:38:15.987055 kernel: raid6: avx2x4 gen() 30827 MB/s Oct 2 19:38:16.004053 kernel: raid6: avx2x4 xor() 8061 MB/s Oct 2 19:38:16.021052 kernel: raid6: avx2x2 gen() 32570 MB/s Oct 2 19:38:16.038052 kernel: raid6: avx2x2 xor() 19174 MB/s Oct 2 19:38:16.055051 kernel: raid6: avx2x1 gen() 26566 MB/s Oct 2 19:38:16.072054 kernel: raid6: avx2x1 xor() 15270 MB/s Oct 2 19:38:16.089053 kernel: raid6: sse2x4 gen() 14790 MB/s Oct 2 19:38:16.106053 kernel: raid6: sse2x4 xor() 7329 MB/s Oct 2 19:38:16.123050 kernel: raid6: sse2x2 gen() 16395 MB/s Oct 2 19:38:16.140053 kernel: raid6: sse2x2 xor() 9733 MB/s Oct 2 19:38:16.157053 kernel: raid6: sse2x1 gen() 12304 MB/s Oct 2 19:38:16.174419 kernel: raid6: sse2x1 xor() 7762 MB/s Oct 2 19:38:16.174438 kernel: raid6: using algorithm avx2x2 gen() 32570 MB/s Oct 2 19:38:16.174448 kernel: raid6: .... xor() 19174 MB/s, rmw enabled Oct 2 19:38:16.174456 kernel: raid6: using avx2x2 recovery algorithm Oct 2 19:38:16.186049 kernel: xor: automatically using best checksumming function avx Oct 2 19:38:16.272060 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:38:16.277754 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:38:16.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:16.280000 audit: BPF prog-id=7 op=LOAD Oct 2 19:38:16.280000 audit: BPF prog-id=8 op=LOAD Oct 2 19:38:16.280836 systemd[1]: Starting systemd-udevd.service... Oct 2 19:38:16.281967 kernel: audit: type=1130 audit(1696275496.278:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:16.291883 systemd-udevd[401]: Using default interface naming scheme 'v252'. Oct 2 19:38:16.295872 systemd[1]: Started systemd-udevd.service. Oct 2 19:38:16.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:16.297320 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:38:16.307857 dracut-pre-trigger[407]: rd.md=0: removing MD RAID activation Oct 2 19:38:16.326636 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:38:16.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:16.327666 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:38:16.359733 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:38:16.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:16.384072 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:38:16.386055 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:38:16.393056 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:38:16.395052 kernel: libata version 3.00 loaded. Oct 2 19:38:16.408096 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 19:38:16.413712 kernel: scsi host0: ata_piix Oct 2 19:38:16.413835 kernel: scsi host1: ata_piix Oct 2 19:38:16.413945 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Oct 2 19:38:16.413959 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Oct 2 19:38:16.413971 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:38:16.413983 kernel: AES CTR mode by8 optimization enabled Oct 2 19:38:16.437067 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (444) Oct 2 19:38:16.440940 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:38:16.465513 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:38:16.469069 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:38:16.470681 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:38:16.476981 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:38:16.478693 systemd[1]: Starting disk-uuid.service... Oct 2 19:38:16.486059 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:38:16.490050 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:38:16.570051 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Oct 2 19:38:16.570102 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Oct 2 19:38:16.598054 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Oct 2 19:38:16.598217 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:38:16.615068 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Oct 2 19:38:17.493052 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:38:17.493126 disk-uuid[512]: The operation has completed successfully. Oct 2 19:38:17.518588 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:38:17.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.518665 systemd[1]: Finished disk-uuid.service. Oct 2 19:38:17.522938 systemd[1]: Starting verity-setup.service... Oct 2 19:38:17.535059 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:38:17.562550 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:38:17.563640 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:38:17.565771 systemd[1]: Finished verity-setup.service. Oct 2 19:38:17.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.631058 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:38:17.631245 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:38:17.631922 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:38:17.632680 systemd[1]: Starting ignition-setup.service... Oct 2 19:38:17.634407 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:38:17.640187 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:38:17.640214 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:38:17.640227 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:38:17.646634 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:38:17.654405 systemd[1]: Finished ignition-setup.service. Oct 2 19:38:17.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.656520 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:38:17.692377 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:38:17.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.693000 audit: BPF prog-id=9 op=LOAD Oct 2 19:38:17.694126 systemd[1]: Starting systemd-networkd.service... Oct 2 19:38:17.713830 systemd-networkd[687]: lo: Link UP Oct 2 19:38:17.713837 systemd-networkd[687]: lo: Gained carrier Oct 2 19:38:17.714249 systemd-networkd[687]: Enumeration completed Oct 2 19:38:17.714422 systemd-networkd[687]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:38:17.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.715126 systemd-networkd[687]: eth0: Link UP Oct 2 19:38:17.715129 systemd-networkd[687]: eth0: Gained carrier Oct 2 19:38:17.715794 systemd[1]: Started systemd-networkd.service. Oct 2 19:38:17.716690 systemd[1]: Reached target network.target. Oct 2 19:38:17.718496 systemd[1]: Starting iscsiuio.service... Oct 2 19:38:17.722453 systemd[1]: Started iscsiuio.service. Oct 2 19:38:17.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.723525 systemd[1]: Starting iscsid.service... Oct 2 19:38:17.726683 iscsid[697]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:38:17.726683 iscsid[697]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:38:17.726683 iscsid[697]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:38:17.726683 iscsid[697]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:38:17.726683 iscsid[697]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:38:17.726683 iscsid[697]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:38:17.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.727680 systemd[1]: Started iscsid.service. Oct 2 19:38:17.729149 systemd-networkd[687]: eth0: DHCPv4 address 10.0.0.10/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:38:17.731182 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:38:17.741557 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:38:17.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.742298 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:38:17.744506 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:38:17.745313 systemd[1]: Reached target remote-fs.target. Oct 2 19:38:17.747585 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:38:17.753871 ignition[617]: Ignition 2.14.0 Oct 2 19:38:17.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.754615 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:38:17.753881 ignition[617]: Stage: fetch-offline Oct 2 19:38:17.753926 ignition[617]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:38:17.753934 ignition[617]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:38:17.754012 ignition[617]: parsed url from cmdline: "" Oct 2 19:38:17.754015 ignition[617]: no config URL provided Oct 2 19:38:17.754019 ignition[617]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:38:17.754024 ignition[617]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:38:17.754053 ignition[617]: op(1): [started] loading QEMU firmware config module Oct 2 19:38:17.754058 ignition[617]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:38:17.760418 ignition[617]: op(1): [finished] loading QEMU firmware config module Oct 2 19:38:17.788689 ignition[617]: parsing config with SHA512: c25495f094b75b49b3c318497470983bd48baaf5ceeb96051bc618cebd120f55018fd2c2599bdf998a336135164531e26fd0b8095cdadb452ad530a288e6b844 Oct 2 19:38:17.812136 unknown[617]: fetched base config from "system" Oct 2 19:38:17.812305 unknown[617]: fetched user config from "qemu" Oct 2 19:38:17.812821 ignition[617]: fetch-offline: fetch-offline passed Oct 2 19:38:17.812811 systemd-resolved[198]: Detected conflict on linux IN A 10.0.0.10 Oct 2 19:38:17.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.812872 ignition[617]: Ignition finished successfully Oct 2 19:38:17.812830 systemd-resolved[198]: Hostname conflict, changing published hostname from 'linux' to 'linux2'. Oct 2 19:38:17.813774 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:38:17.814902 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:38:17.815618 systemd[1]: Starting ignition-kargs.service... Oct 2 19:38:17.824432 ignition[713]: Ignition 2.14.0 Oct 2 19:38:17.824442 ignition[713]: Stage: kargs Oct 2 19:38:17.824523 ignition[713]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:38:17.824531 ignition[713]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:38:17.825564 ignition[713]: kargs: kargs passed Oct 2 19:38:17.827121 systemd[1]: Finished ignition-kargs.service. Oct 2 19:38:17.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.825600 ignition[713]: Ignition finished successfully Oct 2 19:38:17.828916 systemd[1]: Starting ignition-disks.service... Oct 2 19:38:17.835316 ignition[719]: Ignition 2.14.0 Oct 2 19:38:17.835324 ignition[719]: Stage: disks Oct 2 19:38:17.835409 ignition[719]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:38:17.836928 systemd[1]: Finished ignition-disks.service. Oct 2 19:38:17.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.835417 ignition[719]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:38:17.838089 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:38:17.836312 ignition[719]: disks: disks passed Oct 2 19:38:17.839048 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:38:17.836343 ignition[719]: Ignition finished successfully Oct 2 19:38:17.839571 systemd[1]: Reached target local-fs.target. Oct 2 19:38:17.840733 systemd[1]: Reached target sysinit.target. Oct 2 19:38:17.841747 systemd[1]: Reached target basic.target. Oct 2 19:38:17.842960 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:38:17.851547 systemd-fsck[727]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:38:17.855977 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:38:17.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.857527 systemd[1]: Mounting sysroot.mount... Oct 2 19:38:17.863805 systemd[1]: Mounted sysroot.mount. Oct 2 19:38:17.864674 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:38:17.864696 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:38:17.866385 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:38:17.867872 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:38:17.868846 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:38:17.868872 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:38:17.871565 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:38:17.872948 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:38:17.876424 initrd-setup-root[737]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:38:17.880023 initrd-setup-root[745]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:38:17.882773 initrd-setup-root[753]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:38:17.885496 initrd-setup-root[761]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:38:17.907178 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:38:17.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.908860 systemd[1]: Starting ignition-mount.service... Oct 2 19:38:17.910359 systemd[1]: Starting sysroot-boot.service... Oct 2 19:38:17.913479 bash[778]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:38:17.921475 ignition[779]: INFO : Ignition 2.14.0 Oct 2 19:38:17.921475 ignition[779]: INFO : Stage: mount Oct 2 19:38:17.922930 ignition[779]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:38:17.922930 ignition[779]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:38:17.922930 ignition[779]: INFO : mount: mount passed Oct 2 19:38:17.922930 ignition[779]: INFO : Ignition finished successfully Oct 2 19:38:17.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:17.923662 systemd[1]: Finished ignition-mount.service. Oct 2 19:38:17.930054 systemd[1]: Finished sysroot-boot.service. Oct 2 19:38:17.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:18.575190 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:38:18.580049 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (788) Oct 2 19:38:18.581369 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:38:18.581388 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:38:18.581398 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:38:18.584474 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:38:18.586057 systemd[1]: Starting ignition-files.service... Oct 2 19:38:18.599805 ignition[808]: INFO : Ignition 2.14.0 Oct 2 19:38:18.599805 ignition[808]: INFO : Stage: files Oct 2 19:38:18.600978 ignition[808]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:38:18.600978 ignition[808]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:38:18.603349 ignition[808]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:38:18.604813 ignition[808]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:38:18.604813 ignition[808]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:38:18.606861 ignition[808]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:38:18.607770 ignition[808]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:38:18.608997 unknown[808]: wrote ssh authorized keys file for user: core Oct 2 19:38:18.609694 ignition[808]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:38:18.610821 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:38:18.611980 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:38:18.804326 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:38:18.998983 ignition[808]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:38:18.998983 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:38:19.002538 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:38:19.002538 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:38:19.100123 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:38:19.200160 systemd-networkd[687]: eth0: Gained IPv6LL Oct 2 19:38:19.207532 ignition[808]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 19:38:19.209416 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:38:19.209416 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:38:19.209416 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:38:19.295674 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:38:19.938068 ignition[808]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 19:38:19.940254 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:38:19.940254 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:38:19.940254 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:38:20.002053 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:38:21.622894 ignition[808]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 19:38:21.625213 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:38:21.625213 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:38:21.625213 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:38:21.687248 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:38:22.395722 ignition[808]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Oct 2 19:38:22.397696 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:38:22.397696 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:38:22.397696 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:38:22.397696 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:38:22.402098 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:38:22.502597 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:38:22.599891 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:38:22.599891 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:38:22.602699 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:38:22.602699 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:38:22.602699 ignition[808]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(c): [started] processing unit "coreos-metadata.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(c): op(d): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(c): op(d): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(c): [finished] processing unit "coreos-metadata.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(e): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(e): op(f): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(e): op(f): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(e): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(10): [started] processing unit "prepare-critools.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(10): op(11): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(10): op(11): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(10): [finished] processing unit "prepare-critools.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(12): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:38:22.602699 ignition[808]: INFO : files: op(12): op(13): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:38:22.641207 ignition[808]: INFO : files: op(12): op(13): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:38:22.642406 ignition[808]: INFO : files: op(12): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:38:22.642406 ignition[808]: INFO : files: op(14): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:38:22.642406 ignition[808]: INFO : files: op(14): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:38:22.642406 ignition[808]: INFO : files: op(15): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:38:22.642406 ignition[808]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:38:22.647129 ignition[808]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:38:22.648237 ignition[808]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:38:22.648237 ignition[808]: INFO : files: files passed Oct 2 19:38:22.648237 ignition[808]: INFO : Ignition finished successfully Oct 2 19:38:22.654758 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:38:22.654784 kernel: audit: type=1130 audit(1696275502.650:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.649738 systemd[1]: Finished ignition-files.service. Oct 2 19:38:22.651256 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:38:22.654772 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:38:22.658593 initrd-setup-root-after-ignition[831]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:38:22.662395 kernel: audit: type=1130 audit(1696275502.658:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.662410 kernel: audit: type=1130 audit(1696275502.662:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.655305 systemd[1]: Starting ignition-quench.service... Oct 2 19:38:22.666983 kernel: audit: type=1131 audit(1696275502.662:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.667022 initrd-setup-root-after-ignition[834]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:38:22.656793 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:38:22.658778 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:38:22.658844 systemd[1]: Finished ignition-quench.service. Oct 2 19:38:22.662477 systemd[1]: Reached target ignition-complete.target. Oct 2 19:38:22.667051 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:38:22.677590 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:38:22.677662 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:38:22.684395 kernel: audit: type=1130 audit(1696275502.678:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.685011 kernel: audit: type=1131 audit(1696275502.678:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.679098 systemd[1]: Reached target initrd-fs.target. Oct 2 19:38:22.684369 systemd[1]: Reached target initrd.target. Oct 2 19:38:22.685042 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:38:22.685614 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:38:22.694580 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:38:22.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.698050 kernel: audit: type=1130 audit(1696275502.695:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.695687 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:38:22.703986 systemd[1]: Stopped target network.target. Oct 2 19:38:22.704565 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:38:22.705509 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:38:22.706614 systemd[1]: Stopped target timers.target. Oct 2 19:38:22.707674 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:38:22.711674 kernel: audit: type=1131 audit(1696275502.708:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.707756 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:38:22.708761 systemd[1]: Stopped target initrd.target. Oct 2 19:38:22.711750 systemd[1]: Stopped target basic.target. Oct 2 19:38:22.712879 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:38:22.713939 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:38:22.715016 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:38:22.716161 systemd[1]: Stopped target remote-fs.target. Oct 2 19:38:22.717247 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:38:22.718379 systemd[1]: Stopped target sysinit.target. Oct 2 19:38:22.719349 systemd[1]: Stopped target local-fs.target. Oct 2 19:38:22.720362 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:38:22.721430 systemd[1]: Stopped target swap.target. Oct 2 19:38:22.726156 kernel: audit: type=1131 audit(1696275502.723:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.722357 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:38:22.722439 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:38:22.730641 kernel: audit: type=1131 audit(1696275502.727:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.723453 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:38:22.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.726190 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:38:22.726271 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:38:22.727474 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:38:22.727555 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:38:22.735000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.730749 systemd[1]: Stopped target paths.target. Oct 2 19:38:22.731673 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:38:22.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.733087 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:38:22.744000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.745506 ignition[848]: INFO : Ignition 2.14.0 Oct 2 19:38:22.745506 ignition[848]: INFO : Stage: umount Oct 2 19:38:22.745506 ignition[848]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:38:22.745506 ignition[848]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:38:22.745506 ignition[848]: INFO : umount: umount passed Oct 2 19:38:22.745506 ignition[848]: INFO : Ignition finished successfully Oct 2 19:38:22.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.734266 systemd[1]: Stopped target slices.target. Oct 2 19:38:22.734413 systemd[1]: Stopped target sockets.target. Oct 2 19:38:22.734623 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:38:22.734706 systemd[1]: Closed iscsid.socket. Oct 2 19:38:22.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.734958 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:38:22.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.735061 systemd[1]: Closed iscsiuio.socket. Oct 2 19:38:22.756000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:38:22.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.735321 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:38:22.735433 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:38:22.758000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.735735 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:38:22.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.735839 systemd[1]: Stopped ignition-files.service. Oct 2 19:38:22.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.736814 systemd[1]: Stopping ignition-mount.service... Oct 2 19:38:22.737546 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:38:22.738025 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:38:22.738476 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:38:22.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.738687 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:38:22.738796 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:38:22.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.739349 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:38:22.739462 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:38:22.740688 systemd-networkd[687]: eth0: DHCPv6 lease lost Oct 2 19:38:22.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.767000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:38:22.742680 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:38:22.742755 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:38:22.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.745519 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:38:22.745593 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:38:22.747790 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:38:22.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.747855 systemd[1]: Stopped ignition-mount.service. Oct 2 19:38:22.749659 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:38:22.774000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.749732 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:38:22.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.751585 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:38:22.752401 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:38:22.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.752430 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:38:22.753457 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:38:22.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.753485 systemd[1]: Stopped ignition-disks.service. Oct 2 19:38:22.754366 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:38:22.754393 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:38:22.755434 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:38:22.755460 systemd[1]: Stopped ignition-setup.service. Oct 2 19:38:22.756845 systemd[1]: Stopping network-cleanup.service... Oct 2 19:38:22.757562 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:38:22.757598 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:38:22.758811 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:38:22.758839 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:38:22.759990 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:38:22.760017 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:38:22.761198 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:38:22.762836 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:38:22.763237 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:38:22.763297 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:38:22.764628 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:38:22.764661 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:38:22.766702 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:38:22.766800 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:38:22.768595 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:38:22.768656 systemd[1]: Stopped network-cleanup.service. Oct 2 19:38:22.769725 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:38:22.769750 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:38:22.770660 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:38:22.770683 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:38:22.771837 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:38:22.771863 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:38:22.772846 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:38:22.772875 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:38:22.774010 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:38:22.774047 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:38:22.775607 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:38:22.776227 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:38:22.776264 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:38:22.777374 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:38:22.777403 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:38:22.778491 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:38:22.778520 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:38:22.780262 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:38:22.780580 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:38:22.780638 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:38:22.781417 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:38:22.783001 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:38:22.798409 systemd[1]: Switching root. Oct 2 19:38:22.819301 systemd-journald[196]: Journal stopped Oct 2 19:38:28.248493 systemd-journald[196]: Received SIGTERM from PID 1 (systemd). Oct 2 19:38:28.248549 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:38:28.248567 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:38:28.248580 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:38:28.248594 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:38:28.248608 kernel: SELinux: policy capability open_perms=1 Oct 2 19:38:28.248622 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:38:28.248638 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:38:28.248652 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:38:28.248665 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:38:28.248678 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:38:28.248691 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:38:28.248705 systemd[1]: Successfully loaded SELinux policy in 37.230ms. Oct 2 19:38:28.248728 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.804ms. Oct 2 19:38:28.248745 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:38:28.248759 systemd[1]: Detected virtualization kvm. Oct 2 19:38:28.248776 systemd[1]: Detected architecture x86-64. Oct 2 19:38:28.248792 systemd[1]: Detected first boot. Oct 2 19:38:28.248807 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:38:28.248830 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:38:28.248846 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:38:28.248861 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:38:28.248878 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:38:28.248896 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 19:38:28.248909 kernel: audit: type=1334 audit(1696275508.131:81): prog-id=12 op=LOAD Oct 2 19:38:28.248923 kernel: audit: type=1334 audit(1696275508.131:82): prog-id=3 op=UNLOAD Oct 2 19:38:28.248940 kernel: audit: type=1334 audit(1696275508.132:83): prog-id=13 op=LOAD Oct 2 19:38:28.248957 kernel: audit: type=1334 audit(1696275508.133:84): prog-id=14 op=LOAD Oct 2 19:38:28.248971 kernel: audit: type=1334 audit(1696275508.133:85): prog-id=4 op=UNLOAD Oct 2 19:38:28.248985 kernel: audit: type=1334 audit(1696275508.133:86): prog-id=5 op=UNLOAD Oct 2 19:38:28.248997 kernel: audit: type=1334 audit(1696275508.135:87): prog-id=15 op=LOAD Oct 2 19:38:28.249010 kernel: audit: type=1334 audit(1696275508.135:88): prog-id=12 op=UNLOAD Oct 2 19:38:28.249026 kernel: audit: type=1334 audit(1696275508.136:89): prog-id=16 op=LOAD Oct 2 19:38:28.249062 kernel: audit: type=1334 audit(1696275508.137:90): prog-id=17 op=LOAD Oct 2 19:38:28.249076 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:38:28.249090 systemd[1]: Stopped iscsiuio.service. Oct 2 19:38:28.249105 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:38:28.249119 systemd[1]: Stopped iscsid.service. Oct 2 19:38:28.249135 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:38:28.249149 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:38:28.249164 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:38:28.249182 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:38:28.249197 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:38:28.249212 systemd[1]: Created slice system-getty.slice. Oct 2 19:38:28.249226 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:38:28.249241 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:38:28.249256 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:38:28.249271 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:38:28.249289 systemd[1]: Created slice user.slice. Oct 2 19:38:28.249304 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:38:28.249318 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:38:28.249332 systemd[1]: Set up automount boot.automount. Oct 2 19:38:28.249347 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:38:28.249362 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:38:28.249381 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:38:28.249396 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:38:28.249410 systemd[1]: Reached target integritysetup.target. Oct 2 19:38:28.249427 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:38:28.249443 systemd[1]: Reached target remote-fs.target. Oct 2 19:38:28.249457 systemd[1]: Reached target slices.target. Oct 2 19:38:28.249472 systemd[1]: Reached target swap.target. Oct 2 19:38:28.249488 systemd[1]: Reached target torcx.target. Oct 2 19:38:28.249506 systemd[1]: Reached target veritysetup.target. Oct 2 19:38:28.249521 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:38:28.249536 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:38:28.249555 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:38:28.249570 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:38:28.249587 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:38:28.249602 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:38:28.249616 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:38:28.249631 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:38:28.249645 systemd[1]: Mounting media.mount... Oct 2 19:38:28.249660 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:38:28.249676 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:38:28.249690 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:38:28.249705 systemd[1]: Mounting tmp.mount... Oct 2 19:38:28.249722 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:38:28.249737 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:38:28.249752 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:38:28.249767 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:38:28.249781 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:38:28.249796 systemd[1]: Starting modprobe@drm.service... Oct 2 19:38:28.249811 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:38:28.249835 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:38:28.249850 systemd[1]: Starting modprobe@loop.service... Oct 2 19:38:28.249868 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:38:28.249883 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:38:28.249897 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:38:28.249912 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:38:28.249926 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:38:28.249941 systemd[1]: Stopped systemd-journald.service. Oct 2 19:38:28.249955 kernel: loop: module loaded Oct 2 19:38:28.249970 systemd[1]: Starting systemd-journald.service... Oct 2 19:38:28.249984 kernel: fuse: init (API version 7.34) Oct 2 19:38:28.250000 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:38:28.250015 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:38:28.250042 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:38:28.250057 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:38:28.250072 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:38:28.250087 systemd[1]: Stopped verity-setup.service. Oct 2 19:38:28.250102 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:38:28.250116 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:38:28.250135 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:38:28.250152 systemd[1]: Mounted media.mount. Oct 2 19:38:28.250167 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:38:28.250184 systemd-journald[951]: Journal started Oct 2 19:38:28.250233 systemd-journald[951]: Runtime Journal (/run/log/journal/1e3f11e73f8f4aaca8bb4db1ac89d23d) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:38:22.887000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:38:25.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:38:25.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:38:25.851000 audit: BPF prog-id=10 op=LOAD Oct 2 19:38:25.851000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:38:25.851000 audit: BPF prog-id=11 op=LOAD Oct 2 19:38:25.851000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:38:28.131000 audit: BPF prog-id=12 op=LOAD Oct 2 19:38:28.131000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:38:28.132000 audit: BPF prog-id=13 op=LOAD Oct 2 19:38:28.133000 audit: BPF prog-id=14 op=LOAD Oct 2 19:38:28.133000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:38:28.133000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:38:28.135000 audit: BPF prog-id=15 op=LOAD Oct 2 19:38:28.135000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:38:28.136000 audit: BPF prog-id=16 op=LOAD Oct 2 19:38:28.137000 audit: BPF prog-id=17 op=LOAD Oct 2 19:38:28.137000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:38:28.137000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:38:28.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.140000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.151000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:38:28.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.225000 audit: BPF prog-id=18 op=LOAD Oct 2 19:38:28.225000 audit: BPF prog-id=19 op=LOAD Oct 2 19:38:28.225000 audit: BPF prog-id=20 op=LOAD Oct 2 19:38:28.225000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:38:28.225000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:38:28.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.247000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:38:28.247000 audit[951]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffd14402720 a2=4000 a3=7ffd144027bc items=0 ppid=1 pid=951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:28.247000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:38:25.911925 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:38:28.129716 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:38:25.912616 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:38:28.129729 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:38:25.912632 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:38:28.137744 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:38:25.912660 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:38:25.912669 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:38:25.912696 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:38:28.252211 systemd[1]: Started systemd-journald.service. Oct 2 19:38:25.912707 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:38:28.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:25.912904 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:38:25.912936 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:38:28.252526 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:38:25.912946 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:38:25.913292 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:38:25.913321 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:38:25.913336 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:38:25.913349 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:38:25.913362 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:38:25.913374 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:25Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:38:28.253286 systemd[1]: Mounted tmp.mount. Oct 2 19:38:27.868785 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:27Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:38:27.869068 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:27Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:38:27.869159 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:27Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:38:27.869310 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:27Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:38:27.869355 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:27Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:38:27.869408 /usr/lib/systemd/system-generators/torcx-generator[881]: time="2023-10-02T19:38:27Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:38:28.254369 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:38:28.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.255155 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:38:28.255315 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:38:28.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.256085 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:38:28.256247 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:38:28.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.256994 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:38:28.257112 systemd[1]: Finished modprobe@drm.service. Oct 2 19:38:28.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.257827 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:38:28.257999 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:38:28.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.258807 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:38:28.258964 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:38:28.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.259697 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:38:28.259827 systemd[1]: Finished modprobe@loop.service. Oct 2 19:38:28.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.260748 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:38:28.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.261778 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:38:28.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.262565 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:38:28.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.263417 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:38:28.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.264393 systemd[1]: Reached target network-pre.target. Oct 2 19:38:28.265970 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:38:28.267353 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:38:28.267876 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:38:28.269067 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:38:28.270586 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:38:28.271263 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:38:28.271985 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:38:28.272595 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:38:28.273823 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:38:28.274951 systemd-journald[951]: Time spent on flushing to /var/log/journal/1e3f11e73f8f4aaca8bb4db1ac89d23d is 16.856ms for 1108 entries. Oct 2 19:38:28.274951 systemd-journald[951]: System Journal (/var/log/journal/1e3f11e73f8f4aaca8bb4db1ac89d23d) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:38:28.301109 systemd-journald[951]: Received client request to flush runtime journal. Oct 2 19:38:28.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.276207 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:38:28.279891 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:38:28.280748 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:38:28.285157 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:38:28.285867 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:38:28.289290 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:38:28.296251 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:38:28.297742 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:38:28.298581 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:38:28.300986 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:38:28.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.302123 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:38:28.308209 udevadm[989]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:38:28.314931 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:38:28.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.708468 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:38:28.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.709000 audit: BPF prog-id=21 op=LOAD Oct 2 19:38:28.709000 audit: BPF prog-id=22 op=LOAD Oct 2 19:38:28.709000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:38:28.709000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:38:28.710597 systemd[1]: Starting systemd-udevd.service... Oct 2 19:38:28.730787 systemd-udevd[991]: Using default interface naming scheme 'v252'. Oct 2 19:38:28.744395 systemd[1]: Started systemd-udevd.service. Oct 2 19:38:28.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.745000 audit: BPF prog-id=23 op=LOAD Oct 2 19:38:28.746959 systemd[1]: Starting systemd-networkd.service... Oct 2 19:38:28.752000 audit: BPF prog-id=24 op=LOAD Oct 2 19:38:28.752000 audit: BPF prog-id=25 op=LOAD Oct 2 19:38:28.753000 audit: BPF prog-id=26 op=LOAD Oct 2 19:38:28.753840 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:38:28.773234 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:38:28.783774 systemd[1]: Started systemd-userdbd.service. Oct 2 19:38:28.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.794064 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:38:28.799061 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:38:28.814674 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:38:28.817000 audit[1004]: AVC avc: denied { confidentiality } for pid=1004 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:38:28.817000 audit[1004]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55c07e542ba0 a1=32194 a2=7f93e272cbc5 a3=5 items=106 ppid=991 pid=1004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:28.817000 audit: CWD cwd="/" Oct 2 19:38:28.817000 audit: PATH item=0 name=(null) inode=13836 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=1 name=(null) inode=13837 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=2 name=(null) inode=13836 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=3 name=(null) inode=13838 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=4 name=(null) inode=13836 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=5 name=(null) inode=13839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=6 name=(null) inode=13839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=7 name=(null) inode=13840 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=8 name=(null) inode=13839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=9 name=(null) inode=13841 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=10 name=(null) inode=13839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=11 name=(null) inode=13842 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=12 name=(null) inode=13839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=13 name=(null) inode=13843 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=14 name=(null) inode=13839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=15 name=(null) inode=13844 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=16 name=(null) inode=13836 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=17 name=(null) inode=13845 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=18 name=(null) inode=13845 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=19 name=(null) inode=13846 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=20 name=(null) inode=13845 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=21 name=(null) inode=13847 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=22 name=(null) inode=13845 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=23 name=(null) inode=13848 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=24 name=(null) inode=13845 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=25 name=(null) inode=13849 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=26 name=(null) inode=13845 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=27 name=(null) inode=13850 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=28 name=(null) inode=13836 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=29 name=(null) inode=13851 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=30 name=(null) inode=13851 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=31 name=(null) inode=13852 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=32 name=(null) inode=13851 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=33 name=(null) inode=13853 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=34 name=(null) inode=13851 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=35 name=(null) inode=13854 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=36 name=(null) inode=13851 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=37 name=(null) inode=13855 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=38 name=(null) inode=13851 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=39 name=(null) inode=13856 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=40 name=(null) inode=13836 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=41 name=(null) inode=13857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=42 name=(null) inode=13857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=43 name=(null) inode=13858 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=44 name=(null) inode=13857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=45 name=(null) inode=13859 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=46 name=(null) inode=13857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=47 name=(null) inode=13860 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=48 name=(null) inode=13857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=49 name=(null) inode=13861 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=50 name=(null) inode=13857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=51 name=(null) inode=13862 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=52 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=53 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=54 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=55 name=(null) inode=13864 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=56 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=57 name=(null) inode=13865 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=58 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=59 name=(null) inode=13866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=60 name=(null) inode=13866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=61 name=(null) inode=13867 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=62 name=(null) inode=13866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=63 name=(null) inode=13868 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=64 name=(null) inode=13866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=65 name=(null) inode=13869 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=66 name=(null) inode=13866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=67 name=(null) inode=13870 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=68 name=(null) inode=13866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=69 name=(null) inode=13871 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=70 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=71 name=(null) inode=13872 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=72 name=(null) inode=13872 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=73 name=(null) inode=13873 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=74 name=(null) inode=13872 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=75 name=(null) inode=13874 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=76 name=(null) inode=13872 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=77 name=(null) inode=13875 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=78 name=(null) inode=13872 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=79 name=(null) inode=13876 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=80 name=(null) inode=13872 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=81 name=(null) inode=13877 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=82 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=83 name=(null) inode=13878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=84 name=(null) inode=13878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=85 name=(null) inode=13879 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=86 name=(null) inode=13878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=87 name=(null) inode=13880 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=88 name=(null) inode=13878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=89 name=(null) inode=13881 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=90 name=(null) inode=13878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=91 name=(null) inode=13882 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=92 name=(null) inode=13878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=93 name=(null) inode=13883 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=94 name=(null) inode=13863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=95 name=(null) inode=13884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=96 name=(null) inode=13884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=97 name=(null) inode=13885 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=98 name=(null) inode=13884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=99 name=(null) inode=13886 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=100 name=(null) inode=13884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=101 name=(null) inode=13887 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=102 name=(null) inode=13884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=103 name=(null) inode=13888 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=104 name=(null) inode=13884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PATH item=105 name=(null) inode=13889 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:38:28.817000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:38:28.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.834245 systemd-networkd[999]: lo: Link UP Oct 2 19:38:28.834254 systemd-networkd[999]: lo: Gained carrier Oct 2 19:38:28.834579 systemd-networkd[999]: Enumeration completed Oct 2 19:38:28.834681 systemd[1]: Started systemd-networkd.service. Oct 2 19:38:28.836152 systemd-networkd[999]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:38:28.837999 systemd-networkd[999]: eth0: Link UP Oct 2 19:38:28.838004 systemd-networkd[999]: eth0: Gained carrier Oct 2 19:38:28.850087 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Oct 2 19:38:28.853053 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Oct 2 19:38:28.857054 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:38:28.860157 systemd-networkd[999]: eth0: DHCPv4 address 10.0.0.10/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:38:28.913125 kernel: kvm: Nested Virtualization enabled Oct 2 19:38:28.913281 kernel: SVM: kvm: Nested Paging enabled Oct 2 19:38:28.926064 kernel: EDAC MC: Ver: 3.0.0 Oct 2 19:38:28.949516 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:38:28.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.951761 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:38:28.965630 lvm[1027]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:38:28.994322 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:38:28.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:28.995251 systemd[1]: Reached target cryptsetup.target. Oct 2 19:38:28.996956 systemd[1]: Starting lvm2-activation.service... Oct 2 19:38:29.001991 lvm[1028]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:38:29.032271 systemd[1]: Finished lvm2-activation.service. Oct 2 19:38:29.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:29.033110 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:38:29.033690 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:38:29.033714 systemd[1]: Reached target local-fs.target. Oct 2 19:38:29.034255 systemd[1]: Reached target machines.target. Oct 2 19:38:29.035915 systemd[1]: Starting ldconfig.service... Oct 2 19:38:29.036656 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:38:29.036704 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:38:29.037642 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:38:29.039309 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:38:29.041237 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:38:29.041933 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:38:29.041973 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:38:29.042755 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:38:29.043683 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1030 (bootctl) Oct 2 19:38:29.044859 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:38:29.051843 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:38:29.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:29.053079 systemd-tmpfiles[1033]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:38:29.053660 systemd-tmpfiles[1033]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:38:29.055094 systemd-tmpfiles[1033]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:38:29.077732 systemd-fsck[1039]: fsck.fat 4.2 (2021-01-31) Oct 2 19:38:29.077732 systemd-fsck[1039]: /dev/vda1: 789 files, 115069/258078 clusters Oct 2 19:38:29.078959 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:38:29.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:29.082407 systemd[1]: Mounting boot.mount... Oct 2 19:38:29.102178 systemd[1]: Mounted boot.mount. Oct 2 19:38:29.658189 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:38:29.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:30.381205 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:38:30.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:30.382999 systemd[1]: Starting audit-rules.service... Oct 2 19:38:30.384302 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:38:30.385680 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:38:30.387000 audit: BPF prog-id=27 op=LOAD Oct 2 19:38:30.388097 systemd[1]: Starting systemd-resolved.service... Oct 2 19:38:30.389000 audit: BPF prog-id=28 op=LOAD Oct 2 19:38:30.389941 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:38:30.391227 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:38:30.392256 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:38:30.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:30.393186 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:38:30.395000 audit[1053]: SYSTEM_BOOT pid=1053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:38:30.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:30.398099 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:38:30.414585 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:38:30.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:30.527000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:38:30.527000 audit[1062]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffe3d53210 a2=420 a3=0 items=0 ppid=1042 pid=1062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:30.527000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:38:30.528149 augenrules[1062]: No rules Oct 2 19:38:30.528127 systemd-networkd[999]: eth0: Gained IPv6LL Oct 2 19:38:30.528535 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:38:30.529749 systemd[1]: Finished audit-rules.service. Oct 2 19:38:30.529941 systemd-timesyncd[1050]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:38:30.529977 systemd-timesyncd[1050]: Initial clock synchronization to Mon 2023-10-02 19:38:30.817001 UTC. Oct 2 19:38:30.530639 systemd[1]: Reached target time-set.target. Oct 2 19:38:30.532349 systemd-resolved[1046]: Positive Trust Anchors: Oct 2 19:38:30.532364 systemd-resolved[1046]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:38:30.532396 systemd-resolved[1046]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:38:30.546281 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:38:30.546786 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:38:30.551332 systemd-resolved[1046]: Defaulting to hostname 'linux'. Oct 2 19:38:30.552596 systemd[1]: Started systemd-resolved.service. Oct 2 19:38:30.553377 systemd[1]: Reached target network.target. Oct 2 19:38:30.554100 systemd[1]: Reached target nss-lookup.target. Oct 2 19:38:30.612643 ldconfig[1029]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:38:30.617112 systemd[1]: Finished ldconfig.service. Oct 2 19:38:30.618803 systemd[1]: Starting systemd-update-done.service... Oct 2 19:38:30.623368 systemd[1]: Finished systemd-update-done.service. Oct 2 19:38:30.624060 systemd[1]: Reached target sysinit.target. Oct 2 19:38:30.624655 systemd[1]: Started motdgen.path. Oct 2 19:38:30.625258 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:38:30.626078 systemd[1]: Started logrotate.timer. Oct 2 19:38:30.626700 systemd[1]: Started mdadm.timer. Oct 2 19:38:30.627316 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:38:30.627926 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:38:30.627948 systemd[1]: Reached target paths.target. Oct 2 19:38:30.628496 systemd[1]: Reached target timers.target. Oct 2 19:38:30.629258 systemd[1]: Listening on dbus.socket. Oct 2 19:38:30.630578 systemd[1]: Starting docker.socket... Oct 2 19:38:30.633182 systemd[1]: Listening on sshd.socket. Oct 2 19:38:30.633785 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:38:30.634181 systemd[1]: Listening on docker.socket. Oct 2 19:38:30.634843 systemd[1]: Reached target sockets.target. Oct 2 19:38:30.635384 systemd[1]: Reached target basic.target. Oct 2 19:38:30.635918 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:38:30.635938 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:38:30.636673 systemd[1]: Starting containerd.service... Oct 2 19:38:30.638027 systemd[1]: Starting dbus.service... Oct 2 19:38:30.639477 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:38:30.640846 systemd[1]: Starting extend-filesystems.service... Oct 2 19:38:30.641903 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:38:30.642694 systemd[1]: Starting motdgen.service... Oct 2 19:38:30.643691 jq[1073]: false Oct 2 19:38:30.646798 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:38:30.648123 systemd[1]: Starting prepare-critools.service... Oct 2 19:38:30.650313 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:38:30.651633 systemd[1]: Starting sshd-keygen.service... Oct 2 19:38:30.653861 extend-filesystems[1074]: Found sr0 Oct 2 19:38:30.654495 extend-filesystems[1074]: Found vda Oct 2 19:38:30.654495 extend-filesystems[1074]: Found vda1 Oct 2 19:38:30.654495 extend-filesystems[1074]: Found vda2 Oct 2 19:38:30.654495 extend-filesystems[1074]: Found vda3 Oct 2 19:38:30.654495 extend-filesystems[1074]: Found usr Oct 2 19:38:30.654495 extend-filesystems[1074]: Found vda4 Oct 2 19:38:30.659615 extend-filesystems[1074]: Found vda6 Oct 2 19:38:30.659615 extend-filesystems[1074]: Found vda7 Oct 2 19:38:30.659615 extend-filesystems[1074]: Found vda9 Oct 2 19:38:30.659615 extend-filesystems[1074]: Checking size of /dev/vda9 Oct 2 19:38:30.656199 systemd[1]: Starting systemd-logind.service... Oct 2 19:38:30.671412 dbus-daemon[1072]: [system] SELinux support is enabled Oct 2 19:38:30.656728 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:38:30.656774 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:38:30.660473 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:38:30.680099 jq[1094]: true Oct 2 19:38:30.661138 systemd[1]: Starting update-engine.service... Oct 2 19:38:30.662824 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:38:30.665161 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:38:30.665322 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:38:30.667492 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:38:30.681220 jq[1100]: true Oct 2 19:38:30.667625 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:38:30.671566 systemd[1]: Started dbus.service. Oct 2 19:38:30.674012 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:38:30.674145 systemd[1]: Finished motdgen.service. Oct 2 19:38:30.675458 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:38:30.689288 tar[1097]: crictl Oct 2 19:38:30.689463 tar[1096]: ./ Oct 2 19:38:30.689463 tar[1096]: ./macvlan Oct 2 19:38:30.675480 systemd[1]: Reached target system-config.target. Oct 2 19:38:30.676097 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:38:30.676110 systemd[1]: Reached target user-config.target. Oct 2 19:38:30.702220 extend-filesystems[1074]: Old size kept for /dev/vda9 Oct 2 19:38:30.703177 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:38:30.703446 systemd[1]: Finished extend-filesystems.service. Oct 2 19:38:30.717761 systemd-logind[1087]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:38:30.717786 systemd-logind[1087]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:38:30.717967 systemd-logind[1087]: New seat seat0. Oct 2 19:38:30.724573 systemd[1]: Started systemd-logind.service. Oct 2 19:38:30.731474 bash[1125]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:38:30.731697 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:38:30.733854 update_engine[1093]: I1002 19:38:30.733377 1093 main.cc:92] Flatcar Update Engine starting Oct 2 19:38:30.736324 update_engine[1093]: I1002 19:38:30.736253 1093 update_check_scheduler.cc:74] Next update check in 11m53s Oct 2 19:38:30.737207 systemd[1]: Started update-engine.service. Oct 2 19:38:30.739358 env[1098]: time="2023-10-02T19:38:30.733916771Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:38:30.739421 systemd[1]: Started locksmithd.service. Oct 2 19:38:30.740602 tar[1096]: ./static Oct 2 19:38:30.763599 tar[1096]: ./vlan Oct 2 19:38:30.766104 env[1098]: time="2023-10-02T19:38:30.766023443Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:38:30.766358 env[1098]: time="2023-10-02T19:38:30.766340708Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:38:30.767419 env[1098]: time="2023-10-02T19:38:30.767396898Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:38:30.767506 env[1098]: time="2023-10-02T19:38:30.767489192Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:38:30.767740 env[1098]: time="2023-10-02T19:38:30.767722058Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:38:30.767833 env[1098]: time="2023-10-02T19:38:30.767815644Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:38:30.767906 env[1098]: time="2023-10-02T19:38:30.767887408Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:38:30.767981 env[1098]: time="2023-10-02T19:38:30.767962900Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:38:30.768123 env[1098]: time="2023-10-02T19:38:30.768105948Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:38:30.768376 env[1098]: time="2023-10-02T19:38:30.768359614Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:38:30.768533 env[1098]: time="2023-10-02T19:38:30.768514484Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:38:30.768604 env[1098]: time="2023-10-02T19:38:30.768587121Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:38:30.768714 env[1098]: time="2023-10-02T19:38:30.768696145Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:38:30.768808 env[1098]: time="2023-10-02T19:38:30.768786705Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784423309Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784463234Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784474746Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784502948Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784515522Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784527284Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784538205Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784550608Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784561518Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784572709Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784583219Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784593588Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784691432Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:38:30.784929 env[1098]: time="2023-10-02T19:38:30.784759610Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.784968371Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.784987347Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.784998307Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.785129614Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.785143820Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.785154470Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.785171282Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.785182222Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.785192251Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.785202370Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.785211668Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.785222658Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.785320452Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.785335630Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785513 env[1098]: time="2023-10-02T19:38:30.785345819Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785819 env[1098]: time="2023-10-02T19:38:30.785355758Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:38:30.785819 env[1098]: time="2023-10-02T19:38:30.785371157Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:38:30.785819 env[1098]: time="2023-10-02T19:38:30.785381025Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:38:30.785819 env[1098]: time="2023-10-02T19:38:30.785398037Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:38:30.785819 env[1098]: time="2023-10-02T19:38:30.785429005Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:38:30.785916 env[1098]: time="2023-10-02T19:38:30.785590358Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:38:30.785916 env[1098]: time="2023-10-02T19:38:30.785633889Z" level=info msg="Connect containerd service" Oct 2 19:38:30.785916 env[1098]: time="2023-10-02T19:38:30.785658015Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:38:30.787957 env[1098]: time="2023-10-02T19:38:30.786082070Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:38:30.787957 env[1098]: time="2023-10-02T19:38:30.786253071Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:38:30.787957 env[1098]: time="2023-10-02T19:38:30.786280732Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:38:30.787957 env[1098]: time="2023-10-02T19:38:30.786317892Z" level=info msg="containerd successfully booted in 0.053238s" Oct 2 19:38:30.786411 systemd[1]: Started containerd.service. Oct 2 19:38:30.789389 env[1098]: time="2023-10-02T19:38:30.789355248Z" level=info msg="Start subscribing containerd event" Oct 2 19:38:30.789533 env[1098]: time="2023-10-02T19:38:30.789515248Z" level=info msg="Start recovering state" Oct 2 19:38:30.789671 env[1098]: time="2023-10-02T19:38:30.789647536Z" level=info msg="Start event monitor" Oct 2 19:38:30.789808 env[1098]: time="2023-10-02T19:38:30.789789563Z" level=info msg="Start snapshots syncer" Oct 2 19:38:30.789895 env[1098]: time="2023-10-02T19:38:30.789878580Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:38:30.789982 env[1098]: time="2023-10-02T19:38:30.789962277Z" level=info msg="Start streaming server" Oct 2 19:38:30.794717 tar[1096]: ./portmap Oct 2 19:38:30.824695 tar[1096]: ./host-local Oct 2 19:38:30.831945 locksmithd[1128]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:38:30.850157 tar[1096]: ./vrf Oct 2 19:38:30.877421 tar[1096]: ./bridge Oct 2 19:38:30.913867 tar[1096]: ./tuning Oct 2 19:38:30.940080 tar[1096]: ./firewall Oct 2 19:38:30.974057 tar[1096]: ./host-device Oct 2 19:38:31.003939 tar[1096]: ./sbr Oct 2 19:38:31.032003 tar[1096]: ./loopback Oct 2 19:38:31.059644 tar[1096]: ./dhcp Oct 2 19:38:31.089508 systemd[1]: Finished prepare-critools.service. Oct 2 19:38:31.131791 tar[1096]: ./ptp Oct 2 19:38:31.161102 tar[1096]: ./ipvlan Oct 2 19:38:31.189307 tar[1096]: ./bandwidth Oct 2 19:38:31.224497 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:38:31.581436 sshd_keygen[1092]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:38:31.600723 systemd[1]: Finished sshd-keygen.service. Oct 2 19:38:31.602652 systemd[1]: Starting issuegen.service... Oct 2 19:38:31.606730 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:38:31.606860 systemd[1]: Finished issuegen.service. Oct 2 19:38:31.608399 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:38:31.613538 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:38:31.615254 systemd[1]: Started getty@tty1.service. Oct 2 19:38:31.616673 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:38:31.617389 systemd[1]: Reached target getty.target. Oct 2 19:38:31.617965 systemd[1]: Reached target multi-user.target. Oct 2 19:38:31.619430 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:38:31.625203 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:38:31.625321 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:38:31.626081 systemd[1]: Startup finished in 499ms (kernel) + 7.176s (initrd) + 8.782s (userspace) = 16.458s. Oct 2 19:38:39.179756 systemd[1]: Created slice system-sshd.slice. Oct 2 19:38:39.180542 systemd[1]: Started sshd@0-10.0.0.10:22-10.0.0.1:57624.service. Oct 2 19:38:39.217780 sshd[1154]: Accepted publickey for core from 10.0.0.1 port 57624 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:38:39.219100 sshd[1154]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:38:39.227519 systemd-logind[1087]: New session 1 of user core. Oct 2 19:38:39.228407 systemd[1]: Created slice user-500.slice. Oct 2 19:38:39.229303 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:38:39.235975 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:38:39.237132 systemd[1]: Starting user@500.service... Oct 2 19:38:39.239442 (systemd)[1157]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:38:39.301762 systemd[1157]: Queued start job for default target default.target. Oct 2 19:38:39.302278 systemd[1157]: Reached target paths.target. Oct 2 19:38:39.302302 systemd[1157]: Reached target sockets.target. Oct 2 19:38:39.302318 systemd[1157]: Reached target timers.target. Oct 2 19:38:39.302331 systemd[1157]: Reached target basic.target. Oct 2 19:38:39.302373 systemd[1157]: Reached target default.target. Oct 2 19:38:39.302401 systemd[1157]: Startup finished in 58ms. Oct 2 19:38:39.302451 systemd[1]: Started user@500.service. Oct 2 19:38:39.303270 systemd[1]: Started session-1.scope. Oct 2 19:38:39.353961 systemd[1]: Started sshd@1-10.0.0.10:22-10.0.0.1:57640.service. Oct 2 19:38:39.385053 sshd[1166]: Accepted publickey for core from 10.0.0.1 port 57640 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:38:39.386064 sshd[1166]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:38:39.389065 systemd-logind[1087]: New session 2 of user core. Oct 2 19:38:39.389742 systemd[1]: Started session-2.scope. Oct 2 19:38:39.442423 sshd[1166]: pam_unix(sshd:session): session closed for user core Oct 2 19:38:39.444662 systemd[1]: sshd@1-10.0.0.10:22-10.0.0.1:57640.service: Deactivated successfully. Oct 2 19:38:39.445137 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:38:39.445656 systemd-logind[1087]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:38:39.446671 systemd[1]: Started sshd@2-10.0.0.10:22-10.0.0.1:57642.service. Oct 2 19:38:39.447315 systemd-logind[1087]: Removed session 2. Oct 2 19:38:39.477184 sshd[1172]: Accepted publickey for core from 10.0.0.1 port 57642 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:38:39.477958 sshd[1172]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:38:39.480934 systemd-logind[1087]: New session 3 of user core. Oct 2 19:38:39.481773 systemd[1]: Started session-3.scope. Oct 2 19:38:39.529910 sshd[1172]: pam_unix(sshd:session): session closed for user core Oct 2 19:38:39.532699 systemd[1]: sshd@2-10.0.0.10:22-10.0.0.1:57642.service: Deactivated successfully. Oct 2 19:38:39.533288 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:38:39.533818 systemd-logind[1087]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:38:39.534748 systemd[1]: Started sshd@3-10.0.0.10:22-10.0.0.1:57656.service. Oct 2 19:38:39.535439 systemd-logind[1087]: Removed session 3. Oct 2 19:38:39.565826 sshd[1178]: Accepted publickey for core from 10.0.0.1 port 57656 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:38:39.566822 sshd[1178]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:38:39.569868 systemd-logind[1087]: New session 4 of user core. Oct 2 19:38:39.570594 systemd[1]: Started session-4.scope. Oct 2 19:38:39.623358 sshd[1178]: pam_unix(sshd:session): session closed for user core Oct 2 19:38:39.626325 systemd[1]: Started sshd@4-10.0.0.10:22-10.0.0.1:57662.service. Oct 2 19:38:39.626800 systemd[1]: sshd@3-10.0.0.10:22-10.0.0.1:57656.service: Deactivated successfully. Oct 2 19:38:39.627367 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:38:39.627975 systemd-logind[1087]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:38:39.628737 systemd-logind[1087]: Removed session 4. Oct 2 19:38:39.658486 sshd[1183]: Accepted publickey for core from 10.0.0.1 port 57662 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:38:39.659975 sshd[1183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:38:39.665946 systemd-logind[1087]: New session 5 of user core. Oct 2 19:38:39.667483 systemd[1]: Started session-5.scope. Oct 2 19:38:39.743756 sudo[1187]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:38:39.743967 sudo[1187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:38:39.751309 dbus-daemon[1072]: \xd0\u001d6a\xc0U: received setenforce notice (enforcing=-459063984) Oct 2 19:38:39.754056 sudo[1187]: pam_unix(sudo:session): session closed for user root Oct 2 19:38:39.757516 sshd[1183]: pam_unix(sshd:session): session closed for user core Oct 2 19:38:39.761832 systemd[1]: sshd@4-10.0.0.10:22-10.0.0.1:57662.service: Deactivated successfully. Oct 2 19:38:39.762538 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:38:39.763235 systemd-logind[1087]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:38:39.764477 systemd[1]: Started sshd@5-10.0.0.10:22-10.0.0.1:57670.service. Oct 2 19:38:39.765493 systemd-logind[1087]: Removed session 5. Oct 2 19:38:39.804243 sshd[1191]: Accepted publickey for core from 10.0.0.1 port 57670 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:38:39.805882 sshd[1191]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:38:39.811179 systemd-logind[1087]: New session 6 of user core. Oct 2 19:38:39.811222 systemd[1]: Started session-6.scope. Oct 2 19:38:39.867587 sudo[1195]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:38:39.867799 sudo[1195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:38:39.871028 sudo[1195]: pam_unix(sudo:session): session closed for user root Oct 2 19:38:39.876375 sudo[1194]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:38:39.877277 sudo[1194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:38:39.887677 systemd[1]: Stopping audit-rules.service... Oct 2 19:38:39.888000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:38:39.889344 auditctl[1198]: No rules Oct 2 19:38:39.889728 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:38:39.889947 systemd[1]: Stopped audit-rules.service. Oct 2 19:38:39.891615 kernel: kauditd_printk_skb: 183 callbacks suppressed Oct 2 19:38:39.891673 kernel: audit: type=1305 audit(1696275519.888:161): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:38:39.891695 kernel: audit: type=1300 audit(1696275519.888:161): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd2eed24b0 a2=420 a3=0 items=0 ppid=1 pid=1198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:39.888000 audit[1198]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd2eed24b0 a2=420 a3=0 items=0 ppid=1 pid=1198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:39.891952 systemd[1]: Starting audit-rules.service... Oct 2 19:38:39.895085 kernel: audit: type=1327 audit(1696275519.888:161): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:38:39.888000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:38:39.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.898738 kernel: audit: type=1131 audit(1696275519.888:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.908242 augenrules[1215]: No rules Oct 2 19:38:39.908721 systemd[1]: Finished audit-rules.service. Oct 2 19:38:39.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.909629 sudo[1194]: pam_unix(sudo:session): session closed for user root Oct 2 19:38:39.911057 sshd[1191]: pam_unix(sshd:session): session closed for user core Oct 2 19:38:39.908000 audit[1194]: USER_END pid=1194 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.913482 systemd[1]: sshd@5-10.0.0.10:22-10.0.0.1:57670.service: Deactivated successfully. Oct 2 19:38:39.913972 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:38:39.914898 kernel: audit: type=1130 audit(1696275519.907:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.914933 kernel: audit: type=1106 audit(1696275519.908:164): pid=1194 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.914948 kernel: audit: type=1104 audit(1696275519.908:165): pid=1194 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.908000 audit[1194]: CRED_DISP pid=1194 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.915237 systemd[1]: Started sshd@6-10.0.0.10:22-10.0.0.1:57678.service. Oct 2 19:38:39.916768 systemd-logind[1087]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:38:39.917552 systemd-logind[1087]: Removed session 6. Oct 2 19:38:39.910000 audit[1191]: USER_END pid=1191 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:38:39.921090 kernel: audit: type=1106 audit(1696275519.910:166): pid=1191 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:38:39.921132 kernel: audit: type=1104 audit(1696275519.911:167): pid=1191 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:38:39.911000 audit[1191]: CRED_DISP pid=1191 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:38:39.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.10:22-10.0.0.1:57670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.926839 kernel: audit: type=1131 audit(1696275519.912:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.10:22-10.0.0.1:57670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.10:22-10.0.0.1:57678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.946000 audit[1221]: USER_ACCT pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:38:39.947765 sshd[1221]: Accepted publickey for core from 10.0.0.1 port 57678 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:38:39.947000 audit[1221]: CRED_ACQ pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:38:39.947000 audit[1221]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddf4ea0e0 a2=3 a3=0 items=0 ppid=1 pid=1221 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:39.947000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:38:39.948825 sshd[1221]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:38:39.952151 systemd-logind[1087]: New session 7 of user core. Oct 2 19:38:39.952797 systemd[1]: Started session-7.scope. Oct 2 19:38:39.955000 audit[1221]: USER_START pid=1221 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:38:39.956000 audit[1223]: CRED_ACQ pid=1223 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:38:40.004000 audit[1224]: USER_ACCT pid=1224 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:40.004000 audit[1224]: CRED_REFR pid=1224 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:40.005544 sudo[1224]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:38:40.005749 sudo[1224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:38:40.006000 audit[1224]: USER_START pid=1224 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:40.527016 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:38:40.531644 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:38:40.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:40.531881 systemd[1]: Reached target network-online.target. Oct 2 19:38:40.532802 systemd[1]: Starting docker.service... Oct 2 19:38:40.561878 env[1241]: time="2023-10-02T19:38:40.561826690Z" level=info msg="Starting up" Oct 2 19:38:40.563098 env[1241]: time="2023-10-02T19:38:40.563053999Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:38:40.563098 env[1241]: time="2023-10-02T19:38:40.563080399Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:38:40.563188 env[1241]: time="2023-10-02T19:38:40.563102739Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:38:40.563188 env[1241]: time="2023-10-02T19:38:40.563112917Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:38:40.564463 env[1241]: time="2023-10-02T19:38:40.564434750Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:38:40.564463 env[1241]: time="2023-10-02T19:38:40.564451307Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:38:40.564463 env[1241]: time="2023-10-02T19:38:40.564462721Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:38:40.564574 env[1241]: time="2023-10-02T19:38:40.564471095Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:38:40.567978 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1891132329-merged.mount: Deactivated successfully. Oct 2 19:38:40.673682 env[1241]: time="2023-10-02T19:38:40.673632486Z" level=info msg="Loading containers: start." Oct 2 19:38:40.711000 audit[1276]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.711000 audit[1276]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd3b4e03e0 a2=0 a3=7ffd3b4e03cc items=0 ppid=1241 pid=1276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.711000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:38:40.712000 audit[1278]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.712000 audit[1278]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd7493d470 a2=0 a3=7ffd7493d45c items=0 ppid=1241 pid=1278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.712000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:38:40.714000 audit[1280]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1280 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.714000 audit[1280]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe3413ad50 a2=0 a3=7ffe3413ad3c items=0 ppid=1241 pid=1280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.714000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:38:40.715000 audit[1282]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1282 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.715000 audit[1282]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff5b48c510 a2=0 a3=7fff5b48c4fc items=0 ppid=1241 pid=1282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.715000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:38:40.717000 audit[1284]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.717000 audit[1284]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffbbb51a70 a2=0 a3=7fffbbb51a5c items=0 ppid=1241 pid=1284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.717000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:38:40.730000 audit[1289]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.730000 audit[1289]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff32c4d860 a2=0 a3=7fff32c4d84c items=0 ppid=1241 pid=1289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.730000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:38:40.737000 audit[1291]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.737000 audit[1291]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdf521ff00 a2=0 a3=7ffdf521feec items=0 ppid=1241 pid=1291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.737000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:38:40.738000 audit[1293]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.738000 audit[1293]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffca5b12330 a2=0 a3=7ffca5b1231c items=0 ppid=1241 pid=1293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.738000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:38:40.740000 audit[1295]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.740000 audit[1295]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffe793d2a50 a2=0 a3=7ffe793d2a3c items=0 ppid=1241 pid=1295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.740000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:38:40.747000 audit[1299]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1299 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.747000 audit[1299]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff504fcc80 a2=0 a3=7fff504fcc6c items=0 ppid=1241 pid=1299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.747000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:38:40.748000 audit[1300]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.748000 audit[1300]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffdefd27980 a2=0 a3=7ffdefd2796c items=0 ppid=1241 pid=1300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.748000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:38:40.756063 kernel: Initializing XFRM netlink socket Oct 2 19:38:40.785187 env[1241]: time="2023-10-02T19:38:40.785112914Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:38:40.804000 audit[1309]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.804000 audit[1309]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffeffb33060 a2=0 a3=7ffeffb3304c items=0 ppid=1241 pid=1309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.804000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:38:40.814000 audit[1312]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1312 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.814000 audit[1312]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffdb04ec530 a2=0 a3=7ffdb04ec51c items=0 ppid=1241 pid=1312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.814000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:38:40.816000 audit[1315]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.816000 audit[1315]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc962b6510 a2=0 a3=7ffc962b64fc items=0 ppid=1241 pid=1315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.816000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:38:40.818000 audit[1317]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.818000 audit[1317]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe3851f0a0 a2=0 a3=7ffe3851f08c items=0 ppid=1241 pid=1317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.818000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:38:40.819000 audit[1319]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.819000 audit[1319]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffdec766d50 a2=0 a3=7ffdec766d3c items=0 ppid=1241 pid=1319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.819000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:38:40.821000 audit[1321]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.821000 audit[1321]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffded03aa20 a2=0 a3=7ffded03aa0c items=0 ppid=1241 pid=1321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.821000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:38:40.823000 audit[1323]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.823000 audit[1323]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc95078f20 a2=0 a3=7ffc95078f0c items=0 ppid=1241 pid=1323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.823000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:38:40.829000 audit[1326]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.829000 audit[1326]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffe2694f080 a2=0 a3=7ffe2694f06c items=0 ppid=1241 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.829000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:38:40.830000 audit[1328]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.830000 audit[1328]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffeee2035d0 a2=0 a3=7ffeee2035bc items=0 ppid=1241 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.830000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:38:40.832000 audit[1330]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.832000 audit[1330]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffedbb33930 a2=0 a3=7ffedbb3391c items=0 ppid=1241 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.832000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:38:40.833000 audit[1332]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:40.833000 audit[1332]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd7fd62e90 a2=0 a3=7ffd7fd62e7c items=0 ppid=1241 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:40.833000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:38:40.834988 systemd-networkd[999]: docker0: Link UP Oct 2 19:38:41.237000 audit[1336]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:41.237000 audit[1336]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff7f704250 a2=0 a3=7fff7f70423c items=0 ppid=1241 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:41.237000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:38:41.238000 audit[1337]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1337 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:41.238000 audit[1337]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffffa499460 a2=0 a3=7ffffa49944c items=0 ppid=1241 pid=1337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:41.238000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:38:41.240258 env[1241]: time="2023-10-02T19:38:41.240219144Z" level=info msg="Loading containers: done." Oct 2 19:38:41.332918 env[1241]: time="2023-10-02T19:38:41.332848338Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:38:41.333141 env[1241]: time="2023-10-02T19:38:41.333031785Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:38:41.333180 env[1241]: time="2023-10-02T19:38:41.333162439Z" level=info msg="Daemon has completed initialization" Oct 2 19:38:41.352386 systemd[1]: Started docker.service. Oct 2 19:38:41.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:41.356033 env[1241]: time="2023-10-02T19:38:41.355987241Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:38:41.371546 systemd[1]: Reloading. Oct 2 19:38:41.441881 /usr/lib/systemd/system-generators/torcx-generator[1385]: time="2023-10-02T19:38:41Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:38:41.441904 /usr/lib/systemd/system-generators/torcx-generator[1385]: time="2023-10-02T19:38:41Z" level=info msg="torcx already run" Oct 2 19:38:41.500193 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:38:41.500210 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:38:41.519159 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit: BPF prog-id=34 op=LOAD Oct 2 19:38:41.578000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.579000 audit: BPF prog-id=35 op=LOAD Oct 2 19:38:41.579000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:38:41.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.580000 audit: BPF prog-id=36 op=LOAD Oct 2 19:38:41.580000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:38:41.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit: BPF prog-id=37 op=LOAD Oct 2 19:38:41.582000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit: BPF prog-id=38 op=LOAD Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit: BPF prog-id=39 op=LOAD Oct 2 19:38:41.582000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:38:41.582000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit: BPF prog-id=40 op=LOAD Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.582000 audit: BPF prog-id=41 op=LOAD Oct 2 19:38:41.582000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:38:41.582000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit: BPF prog-id=42 op=LOAD Oct 2 19:38:41.583000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit: BPF prog-id=43 op=LOAD Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.583000 audit: BPF prog-id=44 op=LOAD Oct 2 19:38:41.583000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:38:41.583000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:38:41.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.584000 audit: BPF prog-id=45 op=LOAD Oct 2 19:38:41.584000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit: BPF prog-id=46 op=LOAD Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.585000 audit: BPF prog-id=47 op=LOAD Oct 2 19:38:41.585000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:38:41.585000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:38:41.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:41.586000 audit: BPF prog-id=48 op=LOAD Oct 2 19:38:41.586000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:38:41.594885 systemd[1]: Started kubelet.service. Oct 2 19:38:41.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:41.649251 kubelet[1425]: E1002 19:38:41.649165 1425 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:38:41.651370 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:38:41.651492 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:38:41.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:41.967497 env[1098]: time="2023-10-02T19:38:41.967369714Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:38:42.631242 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount9081466.mount: Deactivated successfully. Oct 2 19:38:44.694532 env[1098]: time="2023-10-02T19:38:44.694476065Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:44.715312 env[1098]: time="2023-10-02T19:38:44.715267815Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:44.718171 env[1098]: time="2023-10-02T19:38:44.718130301Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:44.719901 env[1098]: time="2023-10-02T19:38:44.719877267Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:44.720537 env[1098]: time="2023-10-02T19:38:44.720497411Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2\"" Oct 2 19:38:44.728431 env[1098]: time="2023-10-02T19:38:44.728394201Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:38:47.923804 env[1098]: time="2023-10-02T19:38:47.923738479Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:47.925924 env[1098]: time="2023-10-02T19:38:47.925869088Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:47.928120 env[1098]: time="2023-10-02T19:38:47.928082380Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:47.932407 env[1098]: time="2023-10-02T19:38:47.932373821Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:47.933089 env[1098]: time="2023-10-02T19:38:47.933057814Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c\"" Oct 2 19:38:47.941957 env[1098]: time="2023-10-02T19:38:47.941915771Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:38:49.649394 env[1098]: time="2023-10-02T19:38:49.649322022Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:49.652053 env[1098]: time="2023-10-02T19:38:49.651979985Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:49.653660 env[1098]: time="2023-10-02T19:38:49.653612828Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:49.655108 env[1098]: time="2023-10-02T19:38:49.655079744Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:49.655783 env[1098]: time="2023-10-02T19:38:49.655754064Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999\"" Oct 2 19:38:49.664875 env[1098]: time="2023-10-02T19:38:49.664820671Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:38:51.676771 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4286193119.mount: Deactivated successfully. Oct 2 19:38:51.677544 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:38:51.677674 systemd[1]: Stopped kubelet.service. Oct 2 19:38:51.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:51.678280 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:38:51.678319 kernel: audit: type=1130 audit(1696275531.676:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:51.678779 systemd[1]: Started kubelet.service. Oct 2 19:38:51.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:51.682136 kernel: audit: type=1131 audit(1696275531.676:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:51.682201 kernel: audit: type=1130 audit(1696275531.678:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:51.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:51.725593 kubelet[1468]: E1002 19:38:51.725514 1468 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:38:51.730167 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:38:51.730299 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:38:51.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:51.734063 kernel: audit: type=1131 audit(1696275531.729:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:52.726890 env[1098]: time="2023-10-02T19:38:52.726824278Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:52.782648 env[1098]: time="2023-10-02T19:38:52.782557326Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:52.801162 env[1098]: time="2023-10-02T19:38:52.801065388Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:52.829652 env[1098]: time="2023-10-02T19:38:52.829571169Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:52.830177 env[1098]: time="2023-10-02T19:38:52.830132828Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 19:38:52.888261 env[1098]: time="2023-10-02T19:38:52.888217096Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:38:54.843177 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4236596695.mount: Deactivated successfully. Oct 2 19:38:55.234268 env[1098]: time="2023-10-02T19:38:55.234130700Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:55.314490 env[1098]: time="2023-10-02T19:38:55.314444042Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:55.377195 env[1098]: time="2023-10-02T19:38:55.377135133Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:55.395269 env[1098]: time="2023-10-02T19:38:55.395217896Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:55.395714 env[1098]: time="2023-10-02T19:38:55.395681428Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:38:55.406365 env[1098]: time="2023-10-02T19:38:55.406327994Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:38:57.676837 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4218860428.mount: Deactivated successfully. Oct 2 19:39:01.942546 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:39:01.948923 kernel: audit: type=1130 audit(1696275541.941:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:01.948955 kernel: audit: type=1131 audit(1696275541.941:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:01.948974 kernel: audit: type=1130 audit(1696275541.942:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:01.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:01.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:01.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:01.942730 systemd[1]: Stopped kubelet.service. Oct 2 19:39:01.944182 systemd[1]: Started kubelet.service. Oct 2 19:39:02.007570 kubelet[1488]: E1002 19:39:02.007494 1488 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:39:02.009536 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:39:02.009655 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:39:02.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:39:02.013066 kernel: audit: type=1131 audit(1696275542.008:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:39:03.509596 env[1098]: time="2023-10-02T19:39:03.509535821Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:03.511404 env[1098]: time="2023-10-02T19:39:03.511374881Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:03.512964 env[1098]: time="2023-10-02T19:39:03.512927592Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:03.514498 env[1098]: time="2023-10-02T19:39:03.514461002Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:03.515084 env[1098]: time="2023-10-02T19:39:03.515054665Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:39:03.527447 env[1098]: time="2023-10-02T19:39:03.527410015Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:39:04.630751 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3662365499.mount: Deactivated successfully. Oct 2 19:39:05.290293 env[1098]: time="2023-10-02T19:39:05.290229213Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:05.292082 env[1098]: time="2023-10-02T19:39:05.292039561Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:05.293498 env[1098]: time="2023-10-02T19:39:05.293472653Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:05.295098 env[1098]: time="2023-10-02T19:39:05.295053446Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:05.295495 env[1098]: time="2023-10-02T19:39:05.295470391Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:39:06.810103 systemd[1]: Stopped kubelet.service. Oct 2 19:39:06.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:06.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:06.814649 kernel: audit: type=1130 audit(1696275546.809:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:06.814702 kernel: audit: type=1131 audit(1696275546.810:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:06.825549 systemd[1]: Reloading. Oct 2 19:39:06.891569 /usr/lib/systemd/system-generators/torcx-generator[1593]: time="2023-10-02T19:39:06Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:39:06.891605 /usr/lib/systemd/system-generators/torcx-generator[1593]: time="2023-10-02T19:39:06Z" level=info msg="torcx already run" Oct 2 19:39:07.395077 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:39:07.395092 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:39:07.413423 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:39:07.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.469311 kernel: audit: type=1400 audit(1696275547.465:388): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.469364 kernel: audit: type=1400 audit(1696275547.465:389): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.469386 kernel: audit: type=1400 audit(1696275547.465:390): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.471150 kernel: audit: type=1400 audit(1696275547.465:391): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.473025 kernel: audit: type=1400 audit(1696275547.465:392): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.478920 kernel: audit: type=1400 audit(1696275547.465:393): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.478960 kernel: audit: type=1400 audit(1696275547.465:394): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.478985 kernel: audit: type=1400 audit(1696275547.465:395): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.480836 kernel: audit: type=1400 audit(1696275547.465:396): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.482703 kernel: audit: type=1400 audit(1696275547.468:397): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.468000 audit: BPF prog-id=49 op=LOAD Oct 2 19:39:07.468000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:39:07.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.471000 audit: BPF prog-id=50 op=LOAD Oct 2 19:39:07.471000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:39:07.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.473000 audit: BPF prog-id=51 op=LOAD Oct 2 19:39:07.473000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:39:07.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.478000 audit: BPF prog-id=52 op=LOAD Oct 2 19:39:07.478000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:39:07.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.481000 audit: BPF prog-id=53 op=LOAD Oct 2 19:39:07.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.483000 audit: BPF prog-id=54 op=LOAD Oct 2 19:39:07.483000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:39:07.483000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit: BPF prog-id=55 op=LOAD Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit: BPF prog-id=56 op=LOAD Oct 2 19:39:07.484000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:39:07.484000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit: BPF prog-id=57 op=LOAD Oct 2 19:39:07.484000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.484000 audit: BPF prog-id=58 op=LOAD Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit: BPF prog-id=59 op=LOAD Oct 2 19:39:07.485000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:39:07.485000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit: BPF prog-id=60 op=LOAD Oct 2 19:39:07.486000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit: BPF prog-id=61 op=LOAD Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit: BPF prog-id=62 op=LOAD Oct 2 19:39:07.486000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:39:07.486000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.487000 audit: BPF prog-id=63 op=LOAD Oct 2 19:39:07.487000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:39:07.499026 systemd[1]: Started kubelet.service. Oct 2 19:39:07.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:07.541472 kubelet[1632]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:39:07.541472 kubelet[1632]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:39:07.541773 kubelet[1632]: I1002 19:39:07.541512 1632 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:39:07.542634 kubelet[1632]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:39:07.542634 kubelet[1632]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:39:07.895978 kubelet[1632]: I1002 19:39:07.895940 1632 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:39:07.895978 kubelet[1632]: I1002 19:39:07.895968 1632 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:39:07.896185 kubelet[1632]: I1002 19:39:07.896175 1632 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:39:07.899340 kubelet[1632]: I1002 19:39:07.899319 1632 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:39:07.899805 kubelet[1632]: E1002 19:39:07.899791 1632 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.10:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:07.902444 kubelet[1632]: I1002 19:39:07.902432 1632 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:39:07.902633 kubelet[1632]: I1002 19:39:07.902621 1632 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:39:07.902683 kubelet[1632]: I1002 19:39:07.902674 1632 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:39:07.902759 kubelet[1632]: I1002 19:39:07.902691 1632 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:39:07.902759 kubelet[1632]: I1002 19:39:07.902703 1632 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:39:07.902803 kubelet[1632]: I1002 19:39:07.902776 1632 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:39:07.904837 kubelet[1632]: I1002 19:39:07.904825 1632 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:39:07.904984 kubelet[1632]: I1002 19:39:07.904840 1632 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:39:07.904984 kubelet[1632]: I1002 19:39:07.904855 1632 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:39:07.904984 kubelet[1632]: I1002 19:39:07.904881 1632 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:39:07.905490 kubelet[1632]: W1002 19:39:07.905455 1632 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.10:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:07.905603 kubelet[1632]: E1002 19:39:07.905496 1632 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.10:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:07.905802 kubelet[1632]: I1002 19:39:07.905778 1632 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:39:07.905935 kubelet[1632]: W1002 19:39:07.905894 1632 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.10:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:07.905935 kubelet[1632]: E1002 19:39:07.905935 1632 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.10:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:07.906299 kubelet[1632]: W1002 19:39:07.906282 1632 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:39:07.906643 kubelet[1632]: I1002 19:39:07.906630 1632 server.go:1186] "Started kubelet" Oct 2 19:39:07.906760 kubelet[1632]: I1002 19:39:07.906740 1632 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:39:07.907455 kubelet[1632]: I1002 19:39:07.907435 1632 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:39:07.907000 audit[1632]: AVC avc: denied { mac_admin } for pid=1632 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.907000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:39:07.907000 audit[1632]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009cc990 a1=c000dca1f8 a2=c0009cc960 a3=25 items=0 ppid=1 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.907000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:39:07.907000 audit[1632]: AVC avc: denied { mac_admin } for pid=1632 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:07.907000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:39:07.907000 audit[1632]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000507b60 a1=c000dca210 a2=c0009cca20 a3=25 items=0 ppid=1 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.907000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:39:07.908735 kubelet[1632]: I1002 19:39:07.908293 1632 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:39:07.908735 kubelet[1632]: I1002 19:39:07.908353 1632 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:39:07.908735 kubelet[1632]: I1002 19:39:07.908412 1632 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:39:07.908943 kubelet[1632]: E1002 19:39:07.908851 1632 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a619fa2278390", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 39, 7, 906605968, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 39, 7, 906605968, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.10:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.10:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:39:07.909995 kubelet[1632]: E1002 19:39:07.909980 1632 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:39:07.910120 kubelet[1632]: E1002 19:39:07.910105 1632 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:39:07.910683 kubelet[1632]: E1002 19:39:07.910563 1632 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:39:07.910683 kubelet[1632]: I1002 19:39:07.910580 1632 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:39:07.910683 kubelet[1632]: I1002 19:39:07.910684 1632 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:39:07.909000 audit[1644]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.909000 audit[1644]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc794d4f90 a2=0 a3=7ffc794d4f7c items=0 ppid=1632 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.909000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:39:07.911000 audit[1645]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.911000 audit[1645]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc09ee97b0 a2=0 a3=7ffc09ee979c items=0 ppid=1632 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.911000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:39:07.914191 kubelet[1632]: E1002 19:39:07.914158 1632 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.0.0.10:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:07.914673 kubelet[1632]: W1002 19:39:07.914615 1632 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.10:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:07.914774 kubelet[1632]: E1002 19:39:07.914752 1632 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.10:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:07.914000 audit[1647]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.914000 audit[1647]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffdf060400 a2=0 a3=7fffdf0603ec items=0 ppid=1632 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.914000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:39:07.916000 audit[1650]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.916000 audit[1650]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe4fb34080 a2=0 a3=7ffe4fb3406c items=0 ppid=1632 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.916000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:39:07.920000 audit[1653]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1653 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.920000 audit[1653]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fffe96b13d0 a2=0 a3=7fffe96b13bc items=0 ppid=1632 pid=1653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.920000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:39:07.921000 audit[1654]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=1654 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.921000 audit[1654]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff3f73f9d0 a2=0 a3=7fff3f73f9bc items=0 ppid=1632 pid=1654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.921000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:39:07.924000 audit[1658]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=1658 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.924000 audit[1658]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcdbc45a50 a2=0 a3=7ffcdbc45a3c items=0 ppid=1632 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.924000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:39:07.927000 audit[1661]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1661 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.927000 audit[1661]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffd19c48320 a2=0 a3=7ffd19c4830c items=0 ppid=1632 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.927000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:39:07.928000 audit[1662]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1662 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.928000 audit[1662]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffa94141a0 a2=0 a3=7fffa941418c items=0 ppid=1632 pid=1662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.928000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:39:07.929000 audit[1664]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1664 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.929000 audit[1664]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc14f3c120 a2=0 a3=7ffc14f3c10c items=0 ppid=1632 pid=1664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.929000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:39:07.931000 audit[1667]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=1667 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.931000 audit[1667]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffee8a37c90 a2=0 a3=7ffee8a37c7c items=0 ppid=1632 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.931000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:39:07.932446 kubelet[1632]: I1002 19:39:07.932333 1632 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:39:07.932446 kubelet[1632]: I1002 19:39:07.932349 1632 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:39:07.932446 kubelet[1632]: I1002 19:39:07.932363 1632 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:39:07.933000 audit[1670]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=1670 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.933000 audit[1670]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffd5237bd80 a2=0 a3=7ffd5237bd6c items=0 ppid=1632 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.933000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:39:07.935000 audit[1672]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=1672 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.935000 audit[1672]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffed28b78f0 a2=0 a3=7ffed28b78dc items=0 ppid=1632 pid=1672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.935000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:39:07.937000 audit[1674]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=1674 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.937000 audit[1674]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fff957cb300 a2=0 a3=7fff957cb2ec items=0 ppid=1632 pid=1674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.937000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:39:07.938000 audit[1676]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=1676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.938000 audit[1676]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffd5da41460 a2=0 a3=7ffd5da4144c items=0 ppid=1632 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.938000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:39:07.939000 audit[1677]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=1677 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.939000 audit[1677]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc5cbe6790 a2=0 a3=7ffc5cbe677c items=0 ppid=1632 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.939000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:39:07.939000 audit[1678]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=1678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.939000 audit[1678]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd9198aea0 a2=0 a3=7ffd9198ae8c items=0 ppid=1632 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.939000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:39:07.940000 audit[1679]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=1679 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.940000 audit[1679]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffdcf2a4970 a2=0 a3=7ffdcf2a495c items=0 ppid=1632 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.940000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:39:07.940000 audit[1680]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=1680 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.940000 audit[1680]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2ae8d670 a2=0 a3=7ffe2ae8d65c items=0 ppid=1632 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.940000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:39:07.941000 audit[1682]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=1682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:07.941000 audit[1682]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff339e07d0 a2=0 a3=7fff339e07bc items=0 ppid=1632 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.941000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:39:07.941000 audit[1683]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=1683 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.941000 audit[1683]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd904f3ca0 a2=0 a3=7ffd904f3c8c items=0 ppid=1632 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.941000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:39:07.942000 audit[1684]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=1684 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.942000 audit[1684]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7fff93bb2cb0 a2=0 a3=7fff93bb2c9c items=0 ppid=1632 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.942000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:39:07.944000 audit[1686]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=1686 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.944000 audit[1686]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7fff44e24190 a2=0 a3=7fff44e2417c items=0 ppid=1632 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.944000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:39:07.944000 audit[1687]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=1687 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.944000 audit[1687]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff6602c390 a2=0 a3=7fff6602c37c items=0 ppid=1632 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.944000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:39:07.945000 audit[1688]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=1688 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.945000 audit[1688]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff6ac49db0 a2=0 a3=7fff6ac49d9c items=0 ppid=1632 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.945000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:39:07.946000 audit[1690]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=1690 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.946000 audit[1690]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcd07c6ff0 a2=0 a3=7ffcd07c6fdc items=0 ppid=1632 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.946000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:39:07.948000 audit[1693]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=1693 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.948000 audit[1693]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffdf4d51140 a2=0 a3=7ffdf4d5112c items=0 ppid=1632 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.948000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:39:07.949000 audit[1695]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=1695 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.949000 audit[1695]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7fffabdfa210 a2=0 a3=7fffabdfa1fc items=0 ppid=1632 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.949000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:39:07.951000 audit[1697]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=1697 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.951000 audit[1697]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fff84ba8cd0 a2=0 a3=7fff84ba8cbc items=0 ppid=1632 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.951000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:39:07.953000 audit[1699]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=1699 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.953000 audit[1699]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7fff72718d00 a2=0 a3=7fff72718cec items=0 ppid=1632 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.953000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:39:07.953000 audit[1700]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=1700 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.953000 audit[1700]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffc40fb770 a2=0 a3=7fffc40fb75c items=0 ppid=1632 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.953000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:39:07.954000 audit[1701]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=1701 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.954000 audit[1701]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc2222a5e0 a2=0 a3=7ffc2222a5cc items=0 ppid=1632 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.954000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:39:07.955000 audit[1702]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:07.955000 audit[1702]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe60e53c80 a2=0 a3=7ffe60e53c6c items=0 ppid=1632 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.955000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:39:07.958759 kubelet[1632]: I1002 19:39:07.939946 1632 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:39:07.958759 kubelet[1632]: I1002 19:39:07.954417 1632 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:39:07.958759 kubelet[1632]: I1002 19:39:07.954434 1632 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:39:07.958759 kubelet[1632]: I1002 19:39:07.954447 1632 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:39:07.958759 kubelet[1632]: E1002 19:39:07.954497 1632 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:39:07.958759 kubelet[1632]: W1002 19:39:07.954748 1632 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.10:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:07.958759 kubelet[1632]: E1002 19:39:07.954772 1632 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.10:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:08.012316 kubelet[1632]: I1002 19:39:08.012288 1632 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:39:08.012551 kubelet[1632]: E1002 19:39:08.012532 1632 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.10:6443/api/v1/nodes\": dial tcp 10.0.0.10:6443: connect: connection refused" node="localhost" Oct 2 19:39:08.030176 kubelet[1632]: I1002 19:39:08.030121 1632 policy_none.go:49] "None policy: Start" Oct 2 19:39:08.030886 kubelet[1632]: I1002 19:39:08.030860 1632 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:39:08.030992 kubelet[1632]: I1002 19:39:08.030956 1632 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:39:08.036619 systemd[1]: Created slice kubepods.slice. Oct 2 19:39:08.040392 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:39:08.043081 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:39:08.051864 kubelet[1632]: I1002 19:39:08.051790 1632 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:39:08.051864 kubelet[1632]: I1002 19:39:08.051868 1632 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:39:08.050000 audit[1632]: AVC avc: denied { mac_admin } for pid=1632 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:08.050000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:39:08.050000 audit[1632]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00104a630 a1=c000dcbef0 a2=c00104a600 a3=25 items=0 ppid=1 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:08.050000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:39:08.052677 kubelet[1632]: E1002 19:39:08.052581 1632 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:39:08.054470 kubelet[1632]: I1002 19:39:08.054437 1632 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:39:08.054568 kubelet[1632]: I1002 19:39:08.054541 1632 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:39:08.055315 kubelet[1632]: I1002 19:39:08.055285 1632 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:39:08.056192 kubelet[1632]: I1002 19:39:08.056171 1632 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:39:08.056426 kubelet[1632]: I1002 19:39:08.056359 1632 status_manager.go:698] "Failed to get status for pod" podUID=97f1d288f5f51f32e6d93ac1fb20f889 pod="kube-system/kube-apiserver-localhost" err="Get \"https://10.0.0.10:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-localhost\": dial tcp 10.0.0.10:6443: connect: connection refused" Oct 2 19:39:08.057316 kubelet[1632]: I1002 19:39:08.057293 1632 status_manager.go:698] "Failed to get status for pod" podUID=b3fbb6a05b0456c4809ee638aa5cfabe pod="kube-system/kube-controller-manager-localhost" err="Get \"https://10.0.0.10:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-localhost\": dial tcp 10.0.0.10:6443: connect: connection refused" Oct 2 19:39:08.058738 kubelet[1632]: I1002 19:39:08.058713 1632 status_manager.go:698] "Failed to get status for pod" podUID=fbbee22b6941d370b4e7de3cf42df07f pod="kube-system/kube-scheduler-localhost" err="Get \"https://10.0.0.10:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-localhost\": dial tcp 10.0.0.10:6443: connect: connection refused" Oct 2 19:39:08.059957 systemd[1]: Created slice kubepods-burstable-pod97f1d288f5f51f32e6d93ac1fb20f889.slice. Oct 2 19:39:08.068561 systemd[1]: Created slice kubepods-burstable-podb3fbb6a05b0456c4809ee638aa5cfabe.slice. Oct 2 19:39:08.069205 kubelet[1632]: W1002 19:39:08.069181 1632 helpers.go:242] readString: Failed to read "/sys/fs/cgroup/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb3fbb6a05b0456c4809ee638aa5cfabe.slice/cpuset.cpus.effective": read /sys/fs/cgroup/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb3fbb6a05b0456c4809ee638aa5cfabe.slice/cpuset.cpus.effective: no such device Oct 2 19:39:08.075883 systemd[1]: Created slice kubepods-burstable-podfbbee22b6941d370b4e7de3cf42df07f.slice. Oct 2 19:39:08.114668 kubelet[1632]: E1002 19:39:08.114615 1632 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.0.0.10:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:08.114749 kubelet[1632]: I1002 19:39:08.114725 1632 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:39:08.114774 kubelet[1632]: I1002 19:39:08.114763 1632 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:39:08.114812 kubelet[1632]: I1002 19:39:08.114790 1632 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:39:08.114836 kubelet[1632]: I1002 19:39:08.114819 1632 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:39:08.114858 kubelet[1632]: I1002 19:39:08.114845 1632 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:39:08.114884 kubelet[1632]: I1002 19:39:08.114868 1632 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:39:08.114911 kubelet[1632]: I1002 19:39:08.114887 1632 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/97f1d288f5f51f32e6d93ac1fb20f889-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"97f1d288f5f51f32e6d93ac1fb20f889\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:39:08.114911 kubelet[1632]: I1002 19:39:08.114904 1632 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/97f1d288f5f51f32e6d93ac1fb20f889-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"97f1d288f5f51f32e6d93ac1fb20f889\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:39:08.114952 kubelet[1632]: I1002 19:39:08.114925 1632 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/97f1d288f5f51f32e6d93ac1fb20f889-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"97f1d288f5f51f32e6d93ac1fb20f889\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:39:08.214133 kubelet[1632]: I1002 19:39:08.214114 1632 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:39:08.214459 kubelet[1632]: E1002 19:39:08.214434 1632 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.10:6443/api/v1/nodes\": dial tcp 10.0.0.10:6443: connect: connection refused" node="localhost" Oct 2 19:39:08.367457 kubelet[1632]: E1002 19:39:08.367404 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:08.368022 env[1098]: time="2023-10-02T19:39:08.367989239Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:97f1d288f5f51f32e6d93ac1fb20f889,Namespace:kube-system,Attempt:0,}" Oct 2 19:39:08.374215 kubelet[1632]: E1002 19:39:08.374192 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:08.375471 env[1098]: time="2023-10-02T19:39:08.375433185Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,}" Oct 2 19:39:08.377558 kubelet[1632]: E1002 19:39:08.377534 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:08.377839 env[1098]: time="2023-10-02T19:39:08.377806293Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,}" Oct 2 19:39:08.525007 kubelet[1632]: E1002 19:39:08.515256 1632 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.0.0.10:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:08.615586 kubelet[1632]: I1002 19:39:08.615559 1632 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:39:08.615864 kubelet[1632]: E1002 19:39:08.615796 1632 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.10:6443/api/v1/nodes\": dial tcp 10.0.0.10:6443: connect: connection refused" node="localhost" Oct 2 19:39:08.912190 kubelet[1632]: W1002 19:39:08.912085 1632 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.10:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:08.912190 kubelet[1632]: E1002 19:39:08.912133 1632 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.10:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:08.928790 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3102173077.mount: Deactivated successfully. Oct 2 19:39:08.933624 env[1098]: time="2023-10-02T19:39:08.933565719Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:08.936308 env[1098]: time="2023-10-02T19:39:08.936259499Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:08.937724 env[1098]: time="2023-10-02T19:39:08.937667752Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:08.938559 env[1098]: time="2023-10-02T19:39:08.938519323Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:08.940294 env[1098]: time="2023-10-02T19:39:08.940262754Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:08.941248 env[1098]: time="2023-10-02T19:39:08.941220322Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:08.942900 env[1098]: time="2023-10-02T19:39:08.942872493Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:08.944340 env[1098]: time="2023-10-02T19:39:08.944315399Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:08.946588 env[1098]: time="2023-10-02T19:39:08.946526767Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:08.948135 env[1098]: time="2023-10-02T19:39:08.948097702Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:08.951878 env[1098]: time="2023-10-02T19:39:08.951847988Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:08.953375 env[1098]: time="2023-10-02T19:39:08.953353746Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:08.971975 env[1098]: time="2023-10-02T19:39:08.971904963Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:39:08.971975 env[1098]: time="2023-10-02T19:39:08.971946925Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:39:08.971975 env[1098]: time="2023-10-02T19:39:08.971957269Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:39:08.972185 env[1098]: time="2023-10-02T19:39:08.972150756Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fc9b00c168efa514ef597c50e9e33c3df608881e8a13d88fe3f741e07f1a7ee3 pid=1709 runtime=io.containerd.runc.v2 Oct 2 19:39:08.978747 env[1098]: time="2023-10-02T19:39:08.978672288Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:39:08.978747 env[1098]: time="2023-10-02T19:39:08.978707654Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:39:08.978747 env[1098]: time="2023-10-02T19:39:08.978727632Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:39:08.979163 env[1098]: time="2023-10-02T19:39:08.979122253Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/47dc9ba9c74cbe8365accc2a80a9fa03287f7da443e331aa3bf53b195f75bb0a pid=1726 runtime=io.containerd.runc.v2 Oct 2 19:39:08.993128 env[1098]: time="2023-10-02T19:39:08.992945859Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:39:08.993128 env[1098]: time="2023-10-02T19:39:08.992998205Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:39:08.993128 env[1098]: time="2023-10-02T19:39:08.993007798Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:39:08.994109 env[1098]: time="2023-10-02T19:39:08.993512985Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c8b8af271a8c9a34408efa80d694c7593cfe9233ee7ecbb0f18eb3c41d11781f pid=1737 runtime=io.containerd.runc.v2 Oct 2 19:39:09.002140 systemd[1]: Started cri-containerd-fc9b00c168efa514ef597c50e9e33c3df608881e8a13d88fe3f741e07f1a7ee3.scope. Oct 2 19:39:09.012756 systemd[1]: Started cri-containerd-c8b8af271a8c9a34408efa80d694c7593cfe9233ee7ecbb0f18eb3c41d11781f.scope. Oct 2 19:39:09.055879 systemd[1]: Started cri-containerd-47dc9ba9c74cbe8365accc2a80a9fa03287f7da443e331aa3bf53b195f75bb0a.scope. Oct 2 19:39:09.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit: BPF prog-id=64 op=LOAD Oct 2 19:39:09.070000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit[1758]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1737 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623861663237316138633961333434303865666138306436393463 Oct 2 19:39:09.070000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit[1758]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1737 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623861663237316138633961333434303865666138306436393463 Oct 2 19:39:09.070000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.070000 audit: BPF prog-id=65 op=LOAD Oct 2 19:39:09.070000 audit[1758]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000248da0 items=0 ppid=1737 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623861663237316138633961333434303865666138306436393463 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit: BPF prog-id=66 op=LOAD Oct 2 19:39:09.071000 audit[1758]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000248de8 items=0 ppid=1737 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623861663237316138633961333434303865666138306436393463 Oct 2 19:39:09.071000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:39:09.071000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { perfmon } for pid=1758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit[1758]: AVC avc: denied { bpf } for pid=1758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.071000 audit: BPF prog-id=67 op=LOAD Oct 2 19:39:09.071000 audit[1758]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002491f8 items=0 ppid=1737 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623861663237316138633961333434303865666138306436393463 Oct 2 19:39:09.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.073000 audit: BPF prog-id=68 op=LOAD Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=1709 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396230306331363865666135313465663539376335306539653333 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=1709 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396230306331363865666135313465663539376335306539653333 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit: BPF prog-id=69 op=LOAD Oct 2 19:39:09.074000 audit[1728]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0002a8e90 items=0 ppid=1709 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396230306331363865666135313465663539376335306539653333 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit: BPF prog-id=70 op=LOAD Oct 2 19:39:09.074000 audit[1728]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0002a8ed8 items=0 ppid=1709 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396230306331363865666135313465663539376335306539653333 Oct 2 19:39:09.074000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:39:09.074000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { perfmon } for pid=1728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit[1728]: AVC avc: denied { bpf } for pid=1728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.074000 audit: BPF prog-id=71 op=LOAD Oct 2 19:39:09.074000 audit[1728]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0002a92e8 items=0 ppid=1709 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396230306331363865666135313465663539376335306539653333 Oct 2 19:39:09.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit: BPF prog-id=72 op=LOAD Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1726 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.079000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437646339626139633734636265383336356163636332613830613966 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1726 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.079000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437646339626139633734636265383336356163636332613830613966 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit: BPF prog-id=73 op=LOAD Oct 2 19:39:09.079000 audit[1772]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000212450 items=0 ppid=1726 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.079000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437646339626139633734636265383336356163636332613830613966 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.079000 audit: BPF prog-id=74 op=LOAD Oct 2 19:39:09.079000 audit[1772]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000212498 items=0 ppid=1726 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.079000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437646339626139633734636265383336356163636332613830613966 Oct 2 19:39:09.080000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:39:09.080000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:39:09.080000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.080000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.080000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.080000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.080000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.080000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.080000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.080000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.080000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.080000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.080000 audit: BPF prog-id=75 op=LOAD Oct 2 19:39:09.080000 audit[1772]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002128a8 items=0 ppid=1726 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437646339626139633734636265383336356163636332613830613966 Oct 2 19:39:09.105183 env[1098]: time="2023-10-02T19:39:09.105126030Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,} returns sandbox id \"c8b8af271a8c9a34408efa80d694c7593cfe9233ee7ecbb0f18eb3c41d11781f\"" Oct 2 19:39:09.105587 env[1098]: time="2023-10-02T19:39:09.105550119Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:97f1d288f5f51f32e6d93ac1fb20f889,Namespace:kube-system,Attempt:0,} returns sandbox id \"fc9b00c168efa514ef597c50e9e33c3df608881e8a13d88fe3f741e07f1a7ee3\"" Oct 2 19:39:09.106105 kubelet[1632]: E1002 19:39:09.106085 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:09.106569 kubelet[1632]: E1002 19:39:09.106555 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:09.109620 env[1098]: time="2023-10-02T19:39:09.109461803Z" level=info msg="CreateContainer within sandbox \"c8b8af271a8c9a34408efa80d694c7593cfe9233ee7ecbb0f18eb3c41d11781f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:39:09.110419 env[1098]: time="2023-10-02T19:39:09.110385412Z" level=info msg="CreateContainer within sandbox \"fc9b00c168efa514ef597c50e9e33c3df608881e8a13d88fe3f741e07f1a7ee3\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:39:09.111798 env[1098]: time="2023-10-02T19:39:09.111769096Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,} returns sandbox id \"47dc9ba9c74cbe8365accc2a80a9fa03287f7da443e331aa3bf53b195f75bb0a\"" Oct 2 19:39:09.112162 kubelet[1632]: E1002 19:39:09.112143 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:09.113386 env[1098]: time="2023-10-02T19:39:09.113351644Z" level=info msg="CreateContainer within sandbox \"47dc9ba9c74cbe8365accc2a80a9fa03287f7da443e331aa3bf53b195f75bb0a\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:39:09.114836 kubelet[1632]: W1002 19:39:09.114747 1632 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.10:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:09.114898 kubelet[1632]: E1002 19:39:09.114852 1632 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.10:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:09.137516 env[1098]: time="2023-10-02T19:39:09.137477036Z" level=info msg="CreateContainer within sandbox \"fc9b00c168efa514ef597c50e9e33c3df608881e8a13d88fe3f741e07f1a7ee3\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"6c18108a849b8ee5b3493e54e9c08dab0ced6a97f30918dded0bfbc92f3235c8\"" Oct 2 19:39:09.138478 env[1098]: time="2023-10-02T19:39:09.138412834Z" level=info msg="StartContainer for \"6c18108a849b8ee5b3493e54e9c08dab0ced6a97f30918dded0bfbc92f3235c8\"" Oct 2 19:39:09.140201 env[1098]: time="2023-10-02T19:39:09.140180412Z" level=info msg="CreateContainer within sandbox \"47dc9ba9c74cbe8365accc2a80a9fa03287f7da443e331aa3bf53b195f75bb0a\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"e5e933533fa5cf0fcfe3cb93a48fab42d1b299edc078d28bd04f37e7db32c180\"" Oct 2 19:39:09.140534 env[1098]: time="2023-10-02T19:39:09.140516141Z" level=info msg="StartContainer for \"e5e933533fa5cf0fcfe3cb93a48fab42d1b299edc078d28bd04f37e7db32c180\"" Oct 2 19:39:09.141549 env[1098]: time="2023-10-02T19:39:09.141510940Z" level=info msg="CreateContainer within sandbox \"c8b8af271a8c9a34408efa80d694c7593cfe9233ee7ecbb0f18eb3c41d11781f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"a52c13b2b7b3462a3a8ab06fda9cc48026f6ba1e3951a58acea877420a208dca\"" Oct 2 19:39:09.141928 env[1098]: time="2023-10-02T19:39:09.141905259Z" level=info msg="StartContainer for \"a52c13b2b7b3462a3a8ab06fda9cc48026f6ba1e3951a58acea877420a208dca\"" Oct 2 19:39:09.152316 systemd[1]: Started cri-containerd-6c18108a849b8ee5b3493e54e9c08dab0ced6a97f30918dded0bfbc92f3235c8.scope. Oct 2 19:39:09.158350 systemd[1]: Started cri-containerd-e5e933533fa5cf0fcfe3cb93a48fab42d1b299edc078d28bd04f37e7db32c180.scope. Oct 2 19:39:09.163697 systemd[1]: Started cri-containerd-a52c13b2b7b3462a3a8ab06fda9cc48026f6ba1e3951a58acea877420a208dca.scope. Oct 2 19:39:09.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.172000 audit: BPF prog-id=76 op=LOAD Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1709 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663313831303861383439623865653562333439336535346539633038 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1709 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663313831303861383439623865653562333439336535346539633038 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit: BPF prog-id=77 op=LOAD Oct 2 19:39:09.173000 audit[1839]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00009aaa0 items=0 ppid=1709 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663313831303861383439623865653562333439336535346539633038 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit: BPF prog-id=78 op=LOAD Oct 2 19:39:09.173000 audit[1839]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00009aae8 items=0 ppid=1709 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663313831303861383439623865653562333439336535346539633038 Oct 2 19:39:09.173000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:39:09.173000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.173000 audit: BPF prog-id=79 op=LOAD Oct 2 19:39:09.173000 audit[1839]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00009aef8 items=0 ppid=1709 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663313831303861383439623865653562333439336535346539633038 Oct 2 19:39:09.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.174000 audit: BPF prog-id=80 op=LOAD Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1737 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135326331336232623762333436326133613861623036666461396363 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1737 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135326331336232623762333436326133613861623036666461396363 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit: BPF prog-id=81 op=LOAD Oct 2 19:39:09.175000 audit[1859]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003e2320 items=0 ppid=1737 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135326331336232623762333436326133613861623036666461396363 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit: BPF prog-id=82 op=LOAD Oct 2 19:39:09.175000 audit[1859]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003e2368 items=0 ppid=1737 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135326331336232623762333436326133613861623036666461396363 Oct 2 19:39:09.175000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:39:09.175000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.175000 audit: BPF prog-id=83 op=LOAD Oct 2 19:39:09.175000 audit[1859]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003e2778 items=0 ppid=1737 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135326331336232623762333436326133613861623036666461396363 Oct 2 19:39:09.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit: BPF prog-id=84 op=LOAD Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1726 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535653933333533336661356366306663666533636239336134386661 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1726 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535653933333533336661356366306663666533636239336134386661 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit: BPF prog-id=85 op=LOAD Oct 2 19:39:09.180000 audit[1847]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003848f0 items=0 ppid=1726 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535653933333533336661356366306663666533636239336134386661 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.206086 kubelet[1632]: E1002 19:39:09.205977 1632 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a619fa2278390", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 39, 7, 906605968, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 39, 7, 906605968, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.10:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.10:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:39:09.180000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.180000 audit: BPF prog-id=86 op=LOAD Oct 2 19:39:09.180000 audit[1847]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000384938 items=0 ppid=1726 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535653933333533336661356366306663666533636239336134386661 Oct 2 19:39:09.205000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:39:09.205000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:39:09.205000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.205000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.205000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.205000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.205000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.205000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.205000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.205000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.205000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.205000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:09.205000 audit: BPF prog-id=87 op=LOAD Oct 2 19:39:09.205000 audit[1847]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000384d48 items=0 ppid=1726 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:09.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535653933333533336661356366306663666533636239336134386661 Oct 2 19:39:09.207489 kubelet[1632]: W1002 19:39:09.207435 1632 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.10:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:09.207489 kubelet[1632]: E1002 19:39:09.207471 1632 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.10:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.10:6443: connect: connection refused Oct 2 19:39:09.239202 env[1098]: time="2023-10-02T19:39:09.239132952Z" level=info msg="StartContainer for \"6c18108a849b8ee5b3493e54e9c08dab0ced6a97f30918dded0bfbc92f3235c8\" returns successfully" Oct 2 19:39:09.240537 env[1098]: time="2023-10-02T19:39:09.239654855Z" level=info msg="StartContainer for \"a52c13b2b7b3462a3a8ab06fda9cc48026f6ba1e3951a58acea877420a208dca\" returns successfully" Oct 2 19:39:09.243507 env[1098]: time="2023-10-02T19:39:09.243462751Z" level=info msg="StartContainer for \"e5e933533fa5cf0fcfe3cb93a48fab42d1b299edc078d28bd04f37e7db32c180\" returns successfully" Oct 2 19:39:09.417025 kubelet[1632]: I1002 19:39:09.416930 1632 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:39:09.959833 kubelet[1632]: E1002 19:39:09.959796 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:09.961987 kubelet[1632]: E1002 19:39:09.961961 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:09.963743 kubelet[1632]: E1002 19:39:09.963717 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:10.108000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:10.108000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0002e6020 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:39:10.108000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:10.109000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:10.109000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000289b60 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:39:10.109000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:10.969122 kubelet[1632]: E1002 19:39:10.969087 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:10.969416 kubelet[1632]: E1002 19:39:10.969143 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:10.969510 kubelet[1632]: E1002 19:39:10.969489 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:10.972000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:10.972000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:10.972000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c000f8c000 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:39:10.972000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c002d48080 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:39:10.972000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:39:10.972000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:39:10.972000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:10.972000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c000f8c060 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:39:10.972000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:39:10.973000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:10.973000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0012b03f0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:39:10.973000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:39:10.980000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:10.980000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c002dade40 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:39:10.980000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:39:10.980000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:10.980000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c000deeba0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:39:10.980000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:39:10.999640 kubelet[1632]: E1002 19:39:10.999600 1632 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 19:39:11.103231 kubelet[1632]: I1002 19:39:11.103197 1632 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:39:11.906940 kubelet[1632]: I1002 19:39:11.906867 1632 apiserver.go:52] "Watching apiserver" Oct 2 19:39:11.914474 kubelet[1632]: I1002 19:39:11.914456 1632 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:39:11.956503 kubelet[1632]: I1002 19:39:11.956467 1632 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:39:12.116230 kubelet[1632]: E1002 19:39:12.116196 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:12.372762 kubelet[1632]: E1002 19:39:12.372732 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:12.530220 kubelet[1632]: E1002 19:39:12.530191 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:12.968170 kubelet[1632]: E1002 19:39:12.968144 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:12.968170 kubelet[1632]: E1002 19:39:12.968167 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:12.968335 kubelet[1632]: E1002 19:39:12.968198 1632 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:14.070198 systemd[1]: Reloading. Oct 2 19:39:14.138451 /usr/lib/systemd/system-generators/torcx-generator[1965]: time="2023-10-02T19:39:14Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:39:14.138483 /usr/lib/systemd/system-generators/torcx-generator[1965]: time="2023-10-02T19:39:14Z" level=info msg="torcx already run" Oct 2 19:39:14.191004 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:39:14.191017 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:39:14.209535 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:39:14.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.287839 kernel: kauditd_printk_skb: 640 callbacks suppressed Oct 2 19:39:14.287903 kernel: audit: type=1400 audit(1696275554.278:713): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.287925 kernel: audit: type=1400 audit(1696275554.278:714): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.287941 kernel: audit: type=1400 audit(1696275554.278:715): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.287954 kernel: audit: type=1400 audit(1696275554.278:716): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.292278 kernel: audit: type=1400 audit(1696275554.278:717): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.292325 kernel: audit: type=1400 audit(1696275554.278:718): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.292349 kernel: audit: type=1400 audit(1696275554.278:719): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.294186 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:39:14.294225 kernel: audit: type=1400 audit(1696275554.278:720): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.295046 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:39:14.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.281000 audit: BPF prog-id=88 op=LOAD Oct 2 19:39:14.281000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:39:14.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.283000 audit: BPF prog-id=89 op=LOAD Oct 2 19:39:14.283000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:39:14.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.284000 audit: BPF prog-id=90 op=LOAD Oct 2 19:39:14.284000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:39:14.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.286000 audit: BPF prog-id=91 op=LOAD Oct 2 19:39:14.286000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:39:14.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.289000 audit: BPF prog-id=92 op=LOAD Oct 2 19:39:14.289000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:39:14.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.291000 audit: BPF prog-id=93 op=LOAD Oct 2 19:39:14.291000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:39:14.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.296000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:39:14.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit: BPF prog-id=95 op=LOAD Oct 2 19:39:14.299000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit: BPF prog-id=96 op=LOAD Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.299000 audit: BPF prog-id=97 op=LOAD Oct 2 19:39:14.299000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:39:14.299000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:39:14.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.300000 audit: BPF prog-id=98 op=LOAD Oct 2 19:39:14.300000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit: BPF prog-id=99 op=LOAD Oct 2 19:39:14.301000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit: BPF prog-id=100 op=LOAD Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.301000 audit: BPF prog-id=101 op=LOAD Oct 2 19:39:14.301000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:39:14.301000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit: BPF prog-id=102 op=LOAD Oct 2 19:39:14.302000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit: BPF prog-id=103 op=LOAD Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.302000 audit: BPF prog-id=104 op=LOAD Oct 2 19:39:14.302000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:39:14.302000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit: BPF prog-id=105 op=LOAD Oct 2 19:39:14.304000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit: BPF prog-id=106 op=LOAD Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.304000 audit: BPF prog-id=107 op=LOAD Oct 2 19:39:14.304000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:39:14.304000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:39:14.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.306000 audit: BPF prog-id=108 op=LOAD Oct 2 19:39:14.306000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:39:14.317483 kubelet[1632]: I1002 19:39:14.317440 1632 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:39:14.317598 systemd[1]: Stopping kubelet.service... Oct 2 19:39:14.336270 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:39:14.336462 systemd[1]: Stopped kubelet.service. Oct 2 19:39:14.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:14.338436 systemd[1]: Started kubelet.service. Oct 2 19:39:14.337000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:14.410346 kubelet[2004]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:39:14.410346 kubelet[2004]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:39:14.410734 kubelet[2004]: I1002 19:39:14.410368 2004 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:39:14.411562 kubelet[2004]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:39:14.411562 kubelet[2004]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:39:14.414293 kubelet[2004]: I1002 19:39:14.414272 2004 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:39:14.414293 kubelet[2004]: I1002 19:39:14.414288 2004 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:39:14.414453 kubelet[2004]: I1002 19:39:14.414438 2004 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:39:14.415362 kubelet[2004]: I1002 19:39:14.415346 2004 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:39:14.415803 kubelet[2004]: I1002 19:39:14.415777 2004 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:39:14.418876 kubelet[2004]: I1002 19:39:14.418851 2004 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:39:14.419017 kubelet[2004]: I1002 19:39:14.419003 2004 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:39:14.419094 kubelet[2004]: I1002 19:39:14.419079 2004 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:39:14.419213 kubelet[2004]: I1002 19:39:14.419098 2004 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:39:14.419213 kubelet[2004]: I1002 19:39:14.419108 2004 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:39:14.419213 kubelet[2004]: I1002 19:39:14.419136 2004 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:39:14.421745 kubelet[2004]: I1002 19:39:14.421724 2004 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:39:14.421745 kubelet[2004]: I1002 19:39:14.421739 2004 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:39:14.421839 kubelet[2004]: I1002 19:39:14.421755 2004 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:39:14.421839 kubelet[2004]: I1002 19:39:14.421775 2004 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:39:14.422212 kubelet[2004]: I1002 19:39:14.422176 2004 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:39:14.424000 audit[2004]: AVC avc: denied { mac_admin } for pid=2004 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.424000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:39:14.424000 audit[2004]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0006c7710 a1=c0002a8b10 a2=c0006c76e0 a3=25 items=0 ppid=1 pid=2004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:14.424000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:39:14.424000 audit[2004]: AVC avc: denied { mac_admin } for pid=2004 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.424000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:39:14.424000 audit[2004]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009bc7e0 a1=c0002a8b28 a2=c0006c77a0 a3=25 items=0 ppid=1 pid=2004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:14.424000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:39:14.427394 kubelet[2004]: I1002 19:39:14.423018 2004 server.go:1186] "Started kubelet" Oct 2 19:39:14.427394 kubelet[2004]: I1002 19:39:14.423148 2004 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:39:14.427394 kubelet[2004]: I1002 19:39:14.423636 2004 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:39:14.427394 kubelet[2004]: E1002 19:39:14.424716 2004 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:39:14.427394 kubelet[2004]: E1002 19:39:14.424753 2004 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:39:14.427394 kubelet[2004]: I1002 19:39:14.425866 2004 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:39:14.427394 kubelet[2004]: I1002 19:39:14.425904 2004 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:39:14.427394 kubelet[2004]: I1002 19:39:14.425937 2004 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:39:14.433889 kubelet[2004]: I1002 19:39:14.433850 2004 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:39:14.434811 kubelet[2004]: I1002 19:39:14.434797 2004 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:39:14.454000 audit[2035]: USER_ACCT pid=2035 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:39:14.454000 audit[2035]: CRED_REFR pid=2035 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:39:14.455664 sudo[2035]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:39:14.455816 sudo[2035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:39:14.456657 kubelet[2004]: I1002 19:39:14.456637 2004 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:39:14.456000 audit[2035]: USER_START pid=2035 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:39:14.472622 kubelet[2004]: I1002 19:39:14.472575 2004 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:39:14.472622 kubelet[2004]: I1002 19:39:14.472599 2004 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:39:14.472622 kubelet[2004]: I1002 19:39:14.472625 2004 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:39:14.472825 kubelet[2004]: E1002 19:39:14.472682 2004 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:39:14.479774 kubelet[2004]: I1002 19:39:14.479742 2004 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:39:14.479774 kubelet[2004]: I1002 19:39:14.479759 2004 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:39:14.479774 kubelet[2004]: I1002 19:39:14.479772 2004 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:39:14.480077 kubelet[2004]: I1002 19:39:14.479925 2004 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:39:14.480077 kubelet[2004]: I1002 19:39:14.479936 2004 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:39:14.480077 kubelet[2004]: I1002 19:39:14.479941 2004 policy_none.go:49] "None policy: Start" Oct 2 19:39:14.480435 kubelet[2004]: I1002 19:39:14.480423 2004 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:39:14.480435 kubelet[2004]: I1002 19:39:14.480438 2004 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:39:14.480542 kubelet[2004]: I1002 19:39:14.480532 2004 state_mem.go:75] "Updated machine memory state" Oct 2 19:39:14.483425 kubelet[2004]: I1002 19:39:14.483402 2004 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:39:14.482000 audit[2004]: AVC avc: denied { mac_admin } for pid=2004 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:14.482000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:39:14.482000 audit[2004]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0011428d0 a1=c000f69c50 a2=c0011428a0 a3=25 items=0 ppid=1 pid=2004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:14.482000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:39:14.483635 kubelet[2004]: I1002 19:39:14.483450 2004 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:39:14.483635 kubelet[2004]: I1002 19:39:14.483601 2004 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:39:14.536674 kubelet[2004]: I1002 19:39:14.536649 2004 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:39:14.543109 kubelet[2004]: I1002 19:39:14.543087 2004 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:39:14.543228 kubelet[2004]: I1002 19:39:14.543146 2004 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:39:14.572824 kubelet[2004]: I1002 19:39:14.572781 2004 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:39:14.573012 kubelet[2004]: I1002 19:39:14.572870 2004 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:39:14.573012 kubelet[2004]: I1002 19:39:14.572894 2004 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:39:14.577393 kubelet[2004]: E1002 19:39:14.577359 2004 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:39:14.627833 kubelet[2004]: E1002 19:39:14.627338 2004 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:39:14.735755 kubelet[2004]: I1002 19:39:14.735708 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/97f1d288f5f51f32e6d93ac1fb20f889-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"97f1d288f5f51f32e6d93ac1fb20f889\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:39:14.735755 kubelet[2004]: I1002 19:39:14.735750 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/97f1d288f5f51f32e6d93ac1fb20f889-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"97f1d288f5f51f32e6d93ac1fb20f889\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:39:14.735944 kubelet[2004]: I1002 19:39:14.735781 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:39:14.735944 kubelet[2004]: I1002 19:39:14.735801 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:39:14.735944 kubelet[2004]: I1002 19:39:14.735833 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:39:14.735944 kubelet[2004]: I1002 19:39:14.735856 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:39:14.735944 kubelet[2004]: I1002 19:39:14.735884 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:39:14.736140 kubelet[2004]: I1002 19:39:14.735903 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/97f1d288f5f51f32e6d93ac1fb20f889-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"97f1d288f5f51f32e6d93ac1fb20f889\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:39:14.736140 kubelet[2004]: I1002 19:39:14.735922 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:39:14.829292 kubelet[2004]: E1002 19:39:14.829259 2004 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:39:14.879134 kubelet[2004]: E1002 19:39:14.879005 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:14.929453 kubelet[2004]: E1002 19:39:14.929405 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:14.935364 sudo[2035]: pam_unix(sudo:session): session closed for user root Oct 2 19:39:14.934000 audit[2035]: USER_END pid=2035 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:39:14.934000 audit[2035]: CRED_DISP pid=2035 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:39:15.130586 kubelet[2004]: E1002 19:39:15.130455 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:15.422772 kubelet[2004]: I1002 19:39:15.422607 2004 apiserver.go:52] "Watching apiserver" Oct 2 19:39:15.435747 kubelet[2004]: I1002 19:39:15.435700 2004 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:39:15.440867 kubelet[2004]: I1002 19:39:15.440836 2004 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:39:15.477731 kubelet[2004]: E1002 19:39:15.477704 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:15.829161 kubelet[2004]: E1002 19:39:15.829128 2004 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:39:15.829406 kubelet[2004]: E1002 19:39:15.829395 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:15.884000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:15.884000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000da36e0 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:39:15.884000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:15.884000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:15.884000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000da3720 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:39:15.884000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:15.885000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:15.885000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000da3760 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:39:15.885000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:15.886000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:15.886000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ea1180 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:39:15.886000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:15.957920 sudo[1224]: pam_unix(sudo:session): session closed for user root Oct 2 19:39:15.956000 audit[1224]: USER_END pid=1224 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:39:15.956000 audit[1224]: CRED_DISP pid=1224 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:39:15.959549 sshd[1221]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:15.959000 audit[1221]: USER_END pid=1221 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:39:15.959000 audit[1221]: CRED_DISP pid=1221 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:39:15.961805 systemd[1]: sshd@6-10.0.0.10:22-10.0.0.1:57678.service: Deactivated successfully. Oct 2 19:39:15.962618 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:39:15.962767 systemd[1]: session-7.scope: Consumed 3.039s CPU time. Oct 2 19:39:15.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.10:22-10.0.0.1:57678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:15.963175 systemd-logind[1087]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:39:15.964074 systemd-logind[1087]: Removed session 7. Oct 2 19:39:16.027111 kubelet[2004]: E1002 19:39:16.027079 2004 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:39:16.027521 kubelet[2004]: E1002 19:39:16.027494 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:16.168875 update_engine[1093]: I1002 19:39:16.168633 1093 update_attempter.cc:505] Updating boot flags... Oct 2 19:39:16.479105 kubelet[2004]: E1002 19:39:16.479064 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:16.479473 kubelet[2004]: E1002 19:39:16.479154 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:16.479473 kubelet[2004]: E1002 19:39:16.479155 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:16.635320 kubelet[2004]: I1002 19:39:16.635284 2004 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=4.635238131 pod.CreationTimestamp="2023-10-02 19:39:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:39:16.634687195 +0000 UTC m=+2.292887590" watchObservedRunningTime="2023-10-02 19:39:16.635238131 +0000 UTC m=+2.293438506" Oct 2 19:39:16.635508 kubelet[2004]: I1002 19:39:16.635376 2004 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=4.63536328 pod.CreationTimestamp="2023-10-02 19:39:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:39:16.24122972 +0000 UTC m=+1.899430125" watchObservedRunningTime="2023-10-02 19:39:16.63536328 +0000 UTC m=+2.293563655" Oct 2 19:39:19.680075 kubelet[2004]: E1002 19:39:19.680019 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:19.691650 kubelet[2004]: I1002 19:39:19.691607 2004 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=7.691574353 pod.CreationTimestamp="2023-10-02 19:39:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:39:17.02834442 +0000 UTC m=+2.686544795" watchObservedRunningTime="2023-10-02 19:39:19.691574353 +0000 UTC m=+5.349774718" Oct 2 19:39:20.482911 kubelet[2004]: E1002 19:39:20.482886 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:20.808209 kubelet[2004]: E1002 19:39:20.808101 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:21.490480 kubelet[2004]: E1002 19:39:21.490448 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:21.797559 kubelet[2004]: E1002 19:39:21.797248 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:22.487454 kubelet[2004]: E1002 19:39:22.487421 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:22.487912 kubelet[2004]: E1002 19:39:22.487624 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:27.901527 kernel: kauditd_printk_skb: 290 callbacks suppressed Oct 2 19:39:27.901741 kernel: audit: type=1400 audit(1696275567.898:966): avc: denied { watch } for pid=1886 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32591 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:39:27.898000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32591 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:39:27.898000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00104b380 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:39:27.909407 kernel: audit: type=1300 audit(1696275567.898:966): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00104b380 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:39:27.909540 kernel: audit: type=1327 audit(1696275567.898:966): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:27.898000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:27.988873 kubelet[2004]: I1002 19:39:27.988838 2004 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:39:27.989350 env[1098]: time="2023-10-02T19:39:27.989241794Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:39:27.993375 kubelet[2004]: I1002 19:39:27.989421 2004 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:39:28.161616 kubelet[2004]: I1002 19:39:28.161486 2004 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:39:28.170165 systemd[1]: Created slice kubepods-besteffort-pod06e9bd49_123f_48ef_b508_af48458ec730.slice. Oct 2 19:39:28.171731 kubelet[2004]: W1002 19:39:28.171694 2004 reflector.go:424] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:39:28.171822 kubelet[2004]: E1002 19:39:28.171758 2004 reflector.go:140] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:39:28.187442 kubelet[2004]: I1002 19:39:28.187377 2004 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:39:28.193441 systemd[1]: Created slice kubepods-burstable-pod09d97a73_9473_483a_a374_8fd76b1aee59.slice. Oct 2 19:39:28.357236 kubelet[2004]: I1002 19:39:28.356243 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cl5hh\" (UniqueName: \"kubernetes.io/projected/09d97a73-9473-483a-a374-8fd76b1aee59-kube-api-access-cl5hh\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357236 kubelet[2004]: I1002 19:39:28.356313 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-bpf-maps\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357236 kubelet[2004]: I1002 19:39:28.356344 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-host-proc-sys-kernel\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357236 kubelet[2004]: I1002 19:39:28.356385 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-etc-cni-netd\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357236 kubelet[2004]: I1002 19:39:28.356413 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/09d97a73-9473-483a-a374-8fd76b1aee59-cilium-config-path\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357599 kubelet[2004]: I1002 19:39:28.356448 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-host-proc-sys-net\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357599 kubelet[2004]: I1002 19:39:28.356475 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ndnr6\" (UniqueName: \"kubernetes.io/projected/06e9bd49-123f-48ef-b508-af48458ec730-kube-api-access-ndnr6\") pod \"kube-proxy-98wgm\" (UID: \"06e9bd49-123f-48ef-b508-af48458ec730\") " pod="kube-system/kube-proxy-98wgm" Oct 2 19:39:28.357599 kubelet[2004]: I1002 19:39:28.356501 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-xtables-lock\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357599 kubelet[2004]: I1002 19:39:28.356528 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/06e9bd49-123f-48ef-b508-af48458ec730-lib-modules\") pod \"kube-proxy-98wgm\" (UID: \"06e9bd49-123f-48ef-b508-af48458ec730\") " pod="kube-system/kube-proxy-98wgm" Oct 2 19:39:28.357599 kubelet[2004]: I1002 19:39:28.356558 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-cilium-run\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357767 kubelet[2004]: I1002 19:39:28.356587 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-cilium-cgroup\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357767 kubelet[2004]: I1002 19:39:28.356618 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/09d97a73-9473-483a-a374-8fd76b1aee59-clustermesh-secrets\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357767 kubelet[2004]: I1002 19:39:28.356645 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/09d97a73-9473-483a-a374-8fd76b1aee59-hubble-tls\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357767 kubelet[2004]: I1002 19:39:28.356673 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-lib-modules\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357767 kubelet[2004]: I1002 19:39:28.356701 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/06e9bd49-123f-48ef-b508-af48458ec730-xtables-lock\") pod \"kube-proxy-98wgm\" (UID: \"06e9bd49-123f-48ef-b508-af48458ec730\") " pod="kube-system/kube-proxy-98wgm" Oct 2 19:39:28.357767 kubelet[2004]: I1002 19:39:28.356729 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-hostproc\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.357955 kubelet[2004]: I1002 19:39:28.356756 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/06e9bd49-123f-48ef-b508-af48458ec730-kube-proxy\") pod \"kube-proxy-98wgm\" (UID: \"06e9bd49-123f-48ef-b508-af48458ec730\") " pod="kube-system/kube-proxy-98wgm" Oct 2 19:39:28.357955 kubelet[2004]: I1002 19:39:28.356788 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-cni-path\") pod \"cilium-hlrzn\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " pod="kube-system/cilium-hlrzn" Oct 2 19:39:28.626242 kubelet[2004]: I1002 19:39:28.626180 2004 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:39:28.637509 systemd[1]: Created slice kubepods-besteffort-podedaa949e_acbb_4a34_9745_6deb560ba5fd.slice. Oct 2 19:39:28.766325 kubelet[2004]: I1002 19:39:28.766146 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/edaa949e-acbb-4a34-9745-6deb560ba5fd-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-l4g2g\" (UID: \"edaa949e-acbb-4a34-9745-6deb560ba5fd\") " pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:39:28.766325 kubelet[2004]: I1002 19:39:28.766219 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rhm9r\" (UniqueName: \"kubernetes.io/projected/edaa949e-acbb-4a34-9745-6deb560ba5fd-kube-api-access-rhm9r\") pod \"cilium-operator-f59cbd8c6-l4g2g\" (UID: \"edaa949e-acbb-4a34-9745-6deb560ba5fd\") " pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:39:28.800178 kubelet[2004]: E1002 19:39:28.799937 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:28.807049 env[1098]: time="2023-10-02T19:39:28.804404593Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-hlrzn,Uid:09d97a73-9473-483a-a374-8fd76b1aee59,Namespace:kube-system,Attempt:0,}" Oct 2 19:39:28.844355 env[1098]: time="2023-10-02T19:39:28.844241366Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:39:28.844355 env[1098]: time="2023-10-02T19:39:28.844297953Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:39:28.844355 env[1098]: time="2023-10-02T19:39:28.844333839Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:39:28.844681 env[1098]: time="2023-10-02T19:39:28.844587576Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1 pid=2127 runtime=io.containerd.runc.v2 Oct 2 19:39:28.860786 systemd[1]: Started cri-containerd-c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1.scope. Oct 2 19:39:28.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.888422 kernel: audit: type=1400 audit(1696275568.876:967): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.888795 kernel: audit: type=1400 audit(1696275568.876:968): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.893928 kernel: audit: type=1400 audit(1696275568.876:969): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.894075 kernel: audit: type=1400 audit(1696275568.876:970): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.896256 kernel: audit: type=1400 audit(1696275568.876:971): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.898354 kernel: audit: type=1400 audit(1696275568.876:972): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.902650 kernel: audit: type=1400 audit(1696275568.876:973): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.887000 audit: BPF prog-id=109 op=LOAD Oct 2 19:39:28.887000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.887000 audit[2137]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2127 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:28.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653964356362303339336437306262313935636666643435393230 Oct 2 19:39:28.887000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.887000 audit[2137]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2127 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:28.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653964356362303339336437306262313935636666643435393230 Oct 2 19:39:28.888000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.888000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.888000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.888000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.888000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.888000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.888000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.888000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.888000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.888000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.888000 audit: BPF prog-id=110 op=LOAD Oct 2 19:39:28.888000 audit[2137]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000290d50 items=0 ppid=2127 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:28.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653964356362303339336437306262313935636666643435393230 Oct 2 19:39:28.895000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.895000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.895000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.895000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.895000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.895000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.895000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.895000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.895000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.895000 audit: BPF prog-id=111 op=LOAD Oct 2 19:39:28.895000 audit[2137]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000290d98 items=0 ppid=2127 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:28.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653964356362303339336437306262313935636666643435393230 Oct 2 19:39:28.897000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:39:28.897000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:39:28.897000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.897000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.897000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.897000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.897000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.897000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.897000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.897000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.897000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.897000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:28.897000 audit: BPF prog-id=112 op=LOAD Oct 2 19:39:28.897000 audit[2137]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002911a8 items=0 ppid=2127 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:28.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653964356362303339336437306262313935636666643435393230 Oct 2 19:39:28.914297 env[1098]: time="2023-10-02T19:39:28.914241728Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-hlrzn,Uid:09d97a73-9473-483a-a374-8fd76b1aee59,Namespace:kube-system,Attempt:0,} returns sandbox id \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\"" Oct 2 19:39:28.915185 kubelet[2004]: E1002 19:39:28.915147 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:28.916408 env[1098]: time="2023-10-02T19:39:28.916361826Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:39:29.241824 kubelet[2004]: E1002 19:39:29.241792 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:29.242274 env[1098]: time="2023-10-02T19:39:29.242171648Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-l4g2g,Uid:edaa949e-acbb-4a34-9745-6deb560ba5fd,Namespace:kube-system,Attempt:0,}" Oct 2 19:39:29.256627 env[1098]: time="2023-10-02T19:39:29.256524189Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:39:29.256627 env[1098]: time="2023-10-02T19:39:29.256593713Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:39:29.256627 env[1098]: time="2023-10-02T19:39:29.256609826Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:39:29.256939 env[1098]: time="2023-10-02T19:39:29.256870255Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b pid=2169 runtime=io.containerd.runc.v2 Oct 2 19:39:29.268677 systemd[1]: Started cri-containerd-c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b.scope. Oct 2 19:39:29.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit: BPF prog-id=113 op=LOAD Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2169 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:29.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335316564646264373433623236353137356664353966633035346565 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2169 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:29.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335316564646264373433623236353137356664353966633035346565 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit: BPF prog-id=114 op=LOAD Oct 2 19:39:29.278000 audit[2179]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0004526f0 items=0 ppid=2169 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:29.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335316564646264373433623236353137356664353966633035346565 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.278000 audit: BPF prog-id=115 op=LOAD Oct 2 19:39:29.278000 audit[2179]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000452738 items=0 ppid=2169 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:29.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335316564646264373433623236353137356664353966633035346565 Oct 2 19:39:29.279000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:39:29.279000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:39:29.279000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.279000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.279000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.279000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.279000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.279000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.279000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.279000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.279000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.279000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:29.279000 audit: BPF prog-id=116 op=LOAD Oct 2 19:39:29.279000 audit[2179]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000452b48 items=0 ppid=2169 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:29.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335316564646264373433623236353137356664353966633035346565 Oct 2 19:39:29.302978 env[1098]: time="2023-10-02T19:39:29.302919906Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-l4g2g,Uid:edaa949e-acbb-4a34-9745-6deb560ba5fd,Namespace:kube-system,Attempt:0,} returns sandbox id \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\"" Oct 2 19:39:29.303649 kubelet[2004]: E1002 19:39:29.303623 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:29.382826 kubelet[2004]: E1002 19:39:29.381858 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:29.383062 env[1098]: time="2023-10-02T19:39:29.382983917Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-98wgm,Uid:06e9bd49-123f-48ef-b508-af48458ec730,Namespace:kube-system,Attempt:0,}" Oct 2 19:39:29.973675 env[1098]: time="2023-10-02T19:39:29.971445248Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:39:29.973675 env[1098]: time="2023-10-02T19:39:29.971502848Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:39:29.973675 env[1098]: time="2023-10-02T19:39:29.971524553Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:39:29.973675 env[1098]: time="2023-10-02T19:39:29.972250477Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4c0ac47da98f3937a572b4866281aed3c099ca0f0bf657aa736266c82410abb8 pid=2209 runtime=io.containerd.runc.v2 Oct 2 19:39:29.999451 systemd[1]: Started cri-containerd-4c0ac47da98f3937a572b4866281aed3c099ca0f0bf657aa736266c82410abb8.scope. Oct 2 19:39:30.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.012000 audit: BPF prog-id=117 op=LOAD Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2209 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463306163343764613938663339333761353732623438363632383161 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2209 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463306163343764613938663339333761353732623438363632383161 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit: BPF prog-id=118 op=LOAD Oct 2 19:39:30.013000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024200 items=0 ppid=2209 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463306163343764613938663339333761353732623438363632383161 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit: BPF prog-id=119 op=LOAD Oct 2 19:39:30.013000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000024248 items=0 ppid=2209 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463306163343764613938663339333761353732623438363632383161 Oct 2 19:39:30.013000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:39:30.013000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.013000 audit: BPF prog-id=120 op=LOAD Oct 2 19:39:30.013000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000024658 items=0 ppid=2209 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463306163343764613938663339333761353732623438363632383161 Oct 2 19:39:30.028341 env[1098]: time="2023-10-02T19:39:30.028302423Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-98wgm,Uid:06e9bd49-123f-48ef-b508-af48458ec730,Namespace:kube-system,Attempt:0,} returns sandbox id \"4c0ac47da98f3937a572b4866281aed3c099ca0f0bf657aa736266c82410abb8\"" Oct 2 19:39:30.029739 kubelet[2004]: E1002 19:39:30.029219 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:30.031458 env[1098]: time="2023-10-02T19:39:30.031423525Z" level=info msg="CreateContainer within sandbox \"4c0ac47da98f3937a572b4866281aed3c099ca0f0bf657aa736266c82410abb8\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:39:30.248089 env[1098]: time="2023-10-02T19:39:30.246140600Z" level=info msg="CreateContainer within sandbox \"4c0ac47da98f3937a572b4866281aed3c099ca0f0bf657aa736266c82410abb8\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"3fab08907180fb76bd2e8a528b8a6665054ad630a904dc8cdf57ca745548fa3d\"" Oct 2 19:39:30.248089 env[1098]: time="2023-10-02T19:39:30.247602057Z" level=info msg="StartContainer for \"3fab08907180fb76bd2e8a528b8a6665054ad630a904dc8cdf57ca745548fa3d\"" Oct 2 19:39:30.285868 systemd[1]: Started cri-containerd-3fab08907180fb76bd2e8a528b8a6665054ad630a904dc8cdf57ca745548fa3d.scope. Oct 2 19:39:30.320000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.320000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2209 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366616230383930373138306662373662643265386135323862386136 Oct 2 19:39:30.320000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.320000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.320000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.320000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.320000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.320000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.320000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.320000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.320000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.320000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.320000 audit: BPF prog-id=121 op=LOAD Oct 2 19:39:30.320000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0003837f0 items=0 ppid=2209 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366616230383930373138306662373662643265386135323862386136 Oct 2 19:39:30.323000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.323000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.323000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.323000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.323000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.323000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.323000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.323000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.323000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.323000 audit: BPF prog-id=122 op=LOAD Oct 2 19:39:30.323000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000383838 items=0 ppid=2209 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366616230383930373138306662373662643265386135323862386136 Oct 2 19:39:30.324000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:39:30.324000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:39:30.324000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.324000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.324000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.324000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.324000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.324000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.324000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.324000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.324000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.324000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:30.324000 audit: BPF prog-id=123 op=LOAD Oct 2 19:39:30.324000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003838c8 items=0 ppid=2209 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366616230383930373138306662373662643265386135323862386136 Oct 2 19:39:30.359908 env[1098]: time="2023-10-02T19:39:30.359846294Z" level=info msg="StartContainer for \"3fab08907180fb76bd2e8a528b8a6665054ad630a904dc8cdf57ca745548fa3d\" returns successfully" Oct 2 19:39:30.428000 audit[2303]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=2303 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.428000 audit[2303]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd3e3cc210 a2=0 a3=7ffd3e3cc1fc items=0 ppid=2265 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.428000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:39:30.428000 audit[2304]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.428000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff575cf870 a2=0 a3=7fff575cf85c items=0 ppid=2265 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.428000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:39:30.430000 audit[2305]: NETFILTER_CFG table=nat:61 family=10 entries=1 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.430000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd2b873e60 a2=0 a3=7ffd2b873e4c items=0 ppid=2265 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.430000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:39:30.430000 audit[2306]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_chain pid=2306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.430000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec8b90980 a2=0 a3=7ffec8b9096c items=0 ppid=2265 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.430000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:39:30.433000 audit[2307]: NETFILTER_CFG table=filter:63 family=10 entries=1 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.433000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc747e4f40 a2=0 a3=7ffc747e4f2c items=0 ppid=2265 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:39:30.435000 audit[2308]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_chain pid=2308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.435000 audit[2308]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe2ab216b0 a2=0 a3=7ffe2ab2169c items=0 ppid=2265 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.435000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:39:30.519251 kubelet[2004]: E1002 19:39:30.516973 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:30.534000 audit[2309]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.534000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd47ce6f80 a2=0 a3=7ffd47ce6f6c items=0 ppid=2265 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.534000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:39:30.537000 audit[2311]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.537000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff95892450 a2=0 a3=7fff9589243c items=0 ppid=2265 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.537000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:39:30.542000 audit[2314]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.542000 audit[2314]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fffcbb032d0 a2=0 a3=7fffcbb032bc items=0 ppid=2265 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.542000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:39:30.544000 audit[2315]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.544000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe9fd477a0 a2=0 a3=7ffe9fd4778c items=0 ppid=2265 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.544000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:39:30.546000 audit[2317]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.546000 audit[2317]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc0b924270 a2=0 a3=7ffc0b92425c items=0 ppid=2265 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.546000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:39:30.548000 audit[2318]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.548000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd00f24010 a2=0 a3=7ffd00f23ffc items=0 ppid=2265 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.548000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:39:30.553000 audit[2320]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.553000 audit[2320]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffedbbe3650 a2=0 a3=7ffedbbe363c items=0 ppid=2265 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.553000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:39:30.559000 audit[2323]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.559000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe311194e0 a2=0 a3=7ffe311194cc items=0 ppid=2265 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.559000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:39:30.560000 audit[2324]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.560000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde9c70a10 a2=0 a3=7ffde9c709fc items=0 ppid=2265 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.560000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:39:30.564000 audit[2326]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.564000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffffdb0cb40 a2=0 a3=7ffffdb0cb2c items=0 ppid=2265 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.564000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:39:30.566000 audit[2327]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.566000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff7b024040 a2=0 a3=7fff7b02402c items=0 ppid=2265 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.566000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:39:30.570000 audit[2329]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.570000 audit[2329]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcc437e8b0 a2=0 a3=7ffcc437e89c items=0 ppid=2265 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.570000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:39:30.575000 audit[2332]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.575000 audit[2332]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffeffaf720 a2=0 a3=7fffeffaf70c items=0 ppid=2265 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.575000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:39:30.578000 audit[2335]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2335 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.578000 audit[2335]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe0b6a3b80 a2=0 a3=7ffe0b6a3b6c items=0 ppid=2265 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.578000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:39:30.581000 audit[2336]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.581000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd4b0da6d0 a2=0 a3=7ffd4b0da6bc items=0 ppid=2265 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.581000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:39:30.588000 audit[2338]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.588000 audit[2338]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffdade56400 a2=0 a3=7ffdade563ec items=0 ppid=2265 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.588000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:39:30.593000 audit[2341]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:39:30.593000 audit[2341]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdfeb25d00 a2=0 a3=7ffdfeb25cec items=0 ppid=2265 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.593000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:39:30.689000 audit[2345]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:39:30.689000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffda57ea1a0 a2=0 a3=7ffda57ea18c items=0 ppid=2265 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.689000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:39:30.700000 audit[2345]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:39:30.700000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffda57ea1a0 a2=0 a3=7ffda57ea18c items=0 ppid=2265 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.700000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:39:30.768000 audit[2375]: NETFILTER_CFG table=filter:84 family=2 entries=12 op=nft_register_rule pid=2375 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:39:30.768000 audit[2375]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffd47d82d40 a2=0 a3=7ffd47d82d2c items=0 ppid=2265 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.768000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:39:30.769000 audit[2375]: NETFILTER_CFG table=nat:85 family=2 entries=20 op=nft_register_rule pid=2375 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:39:30.769000 audit[2375]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffd47d82d40 a2=0 a3=7ffd47d82d2c items=0 ppid=2265 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.769000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:39:30.778000 audit[2376]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_chain pid=2376 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.778000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff6bf6d8f0 a2=0 a3=7fff6bf6d8dc items=0 ppid=2265 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.778000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:39:30.781000 audit[2378]: NETFILTER_CFG table=filter:87 family=10 entries=2 op=nft_register_chain pid=2378 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.781000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fffb8c08080 a2=0 a3=7fffb8c0806c items=0 ppid=2265 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.781000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:39:30.787000 audit[2381]: NETFILTER_CFG table=filter:88 family=10 entries=2 op=nft_register_chain pid=2381 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.787000 audit[2381]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffec0ff1e60 a2=0 a3=7ffec0ff1e4c items=0 ppid=2265 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.787000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:39:30.787000 audit[2382]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.787000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd85d4c420 a2=0 a3=7ffd85d4c40c items=0 ppid=2265 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.787000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:39:30.790000 audit[2384]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2384 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.790000 audit[2384]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffc9df1c20 a2=0 a3=7fffc9df1c0c items=0 ppid=2265 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.790000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:39:30.791000 audit[2385]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=2385 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.791000 audit[2385]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffefff90b90 a2=0 a3=7ffefff90b7c items=0 ppid=2265 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.791000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:39:30.794000 audit[2387]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=2387 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.794000 audit[2387]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd2319ae30 a2=0 a3=7ffd2319ae1c items=0 ppid=2265 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.794000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:39:30.800000 audit[2390]: NETFILTER_CFG table=filter:93 family=10 entries=2 op=nft_register_chain pid=2390 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.800000 audit[2390]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fffea0e32d0 a2=0 a3=7fffea0e32bc items=0 ppid=2265 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.800000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:39:30.801000 audit[2391]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=2391 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.801000 audit[2391]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeaf2c02d0 a2=0 a3=7ffeaf2c02bc items=0 ppid=2265 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.801000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:39:30.804000 audit[2393]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.804000 audit[2393]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe40c21aa0 a2=0 a3=7ffe40c21a8c items=0 ppid=2265 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.804000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:39:30.805000 audit[2394]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_chain pid=2394 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.805000 audit[2394]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff0acb26e0 a2=0 a3=7fff0acb26cc items=0 ppid=2265 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.805000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:39:30.808000 audit[2396]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2396 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.808000 audit[2396]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff1724b420 a2=0 a3=7fff1724b40c items=0 ppid=2265 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.808000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:39:30.812000 audit[2399]: NETFILTER_CFG table=filter:98 family=10 entries=1 op=nft_register_rule pid=2399 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.812000 audit[2399]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcaf83f3f0 a2=0 a3=7ffcaf83f3dc items=0 ppid=2265 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.812000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:39:30.814000 audit[2402]: NETFILTER_CFG table=filter:99 family=10 entries=1 op=nft_register_rule pid=2402 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.814000 audit[2402]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcbf284680 a2=0 a3=7ffcbf28466c items=0 ppid=2265 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.814000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:39:30.817000 audit[2403]: NETFILTER_CFG table=nat:100 family=10 entries=1 op=nft_register_chain pid=2403 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.817000 audit[2403]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffea521d2d0 a2=0 a3=7ffea521d2bc items=0 ppid=2265 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.817000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:39:30.821000 audit[2405]: NETFILTER_CFG table=nat:101 family=10 entries=2 op=nft_register_chain pid=2405 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.821000 audit[2405]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd1f2d7ff0 a2=0 a3=7ffd1f2d7fdc items=0 ppid=2265 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.821000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:39:30.828000 audit[2408]: NETFILTER_CFG table=nat:102 family=10 entries=2 op=nft_register_chain pid=2408 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:39:30.828000 audit[2408]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffcef3b3f50 a2=0 a3=7ffcef3b3f3c items=0 ppid=2265 pid=2408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:39:30.836000 audit[2412]: NETFILTER_CFG table=filter:103 family=10 entries=3 op=nft_register_rule pid=2412 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:39:30.836000 audit[2412]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffd92095630 a2=0 a3=7ffd9209561c items=0 ppid=2265 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.836000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:39:30.837000 audit[2412]: NETFILTER_CFG table=nat:104 family=10 entries=10 op=nft_register_chain pid=2412 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:39:30.837000 audit[2412]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffd92095630 a2=0 a3=7ffd9209561c items=0 ppid=2265 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:30.837000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:39:31.519614 kubelet[2004]: E1002 19:39:31.519561 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:34.559716 kubelet[2004]: I1002 19:39:34.559177 2004 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-98wgm" podStartSLOduration=6.559130264 pod.CreationTimestamp="2023-10-02 19:39:28 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:39:30.685785576 +0000 UTC m=+16.343985951" watchObservedRunningTime="2023-10-02 19:39:34.559130264 +0000 UTC m=+20.217330639" Oct 2 19:39:39.450331 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount464260774.mount: Deactivated successfully. Oct 2 19:39:44.374880 env[1098]: time="2023-10-02T19:39:44.374793589Z" level=error msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" failed" error="failed to pull and unpack image \"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\": failed to extract layer sha256:e740935483f7a73330abd4cbc9a1d31fc068bd57fe9e037cb819828305ce43ec: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/40/fs/usr/bin/cilium-mount: no space left on device: unknown" Oct 2 19:39:44.375315 kubelet[2004]: E1002 19:39:44.375104 2004 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\": failed to extract layer sha256:e740935483f7a73330abd4cbc9a1d31fc068bd57fe9e037cb819828305ce43ec: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/40/fs/usr/bin/cilium-mount: no space left on device: unknown" image="quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5" Oct 2 19:39:44.375315 kubelet[2004]: E1002 19:39:44.375155 2004 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\": failed to extract layer sha256:e740935483f7a73330abd4cbc9a1d31fc068bd57fe9e037cb819828305ce43ec: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/40/fs/usr/bin/cilium-mount: no space left on device: unknown" image="quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5" Oct 2 19:39:44.375591 env[1098]: time="2023-10-02T19:39:44.375532977Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:39:44.376923 kubelet[2004]: E1002 19:39:44.376900 2004 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:44.376923 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:44.376923 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:39:44.377078 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cl5hh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5": failed to extract layer sha256:e740935483f7a73330abd4cbc9a1d31fc068bd57fe9e037cb819828305ce43ec: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/40/fs/usr/bin/cilium-mount: no space left on device: unknown Oct 2 19:39:44.377078 kubelet[2004]: E1002 19:39:44.376964 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\\\": failed to extract layer sha256:e740935483f7a73330abd4cbc9a1d31fc068bd57fe9e037cb819828305ce43ec: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/40/fs/usr/bin/cilium-mount: no space left on device: unknown\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:39:44.572543 kubelet[2004]: E1002 19:39:44.572497 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:44.573275 kubelet[2004]: E1002 19:39:44.573229 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with ImagePullBackOff: \"Back-off pulling image \\\"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\\\"\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:39:44.672359 env[1098]: time="2023-10-02T19:39:44.671714692Z" level=error msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" failed" error="failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\": mkdir /var/lib/containerd/io.containerd.content.v1.content/ingest/ea546312b09f3951a0bca8eb6855b5d9402f70940f1ace6d9b56990fdd29b370: no space left on device" Oct 2 19:39:44.672504 kubelet[2004]: E1002 19:39:44.672053 2004 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\": mkdir /var/lib/containerd/io.containerd.content.v1.content/ingest/ea546312b09f3951a0bca8eb6855b5d9402f70940f1ace6d9b56990fdd29b370: no space left on device" image="quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e" Oct 2 19:39:44.672504 kubelet[2004]: E1002 19:39:44.672102 2004 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\": mkdir /var/lib/containerd/io.containerd.content.v1.content/ingest/ea546312b09f3951a0bca8eb6855b5d9402f70940f1ace6d9b56990fdd29b370: no space left on device" image="quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e" Oct 2 19:39:44.672504 kubelet[2004]: E1002 19:39:44.672280 2004 kuberuntime_manager.go:872] container &Container{Name:cilium-operator,Image:quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Command:[cilium-operator-generic],Args:[--config-dir=/tmp/cilium/config-map --debug=$(CILIUM_DEBUG)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:K8S_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:CILIUM_K8S_NAMESPACE,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:CILIUM_DEBUG,Value:,ValueFrom:&EnvVarSource{FieldRef:nil,ResourceFieldRef:nil,ConfigMapKeyRef:&ConfigMapKeySelector{LocalObjectReference:LocalObjectReference{Name:cilium-config,},Key:debug,Optional:*true,},SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:cilium-config-path,ReadOnly:true,MountPath:/tmp/cilium/config-map,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rhm9r,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/healthz,Port:{0 9234 },Host:127.0.0.1,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:60,TimeoutSeconds:3,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-operator-f59cbd8c6-l4g2g_kube-system(edaa949e-acbb-4a34-9745-6deb560ba5fd): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e": mkdir /var/lib/containerd/io.containerd.content.v1.content/ingest/ea546312b09f3951a0bca8eb6855b5d9402f70940f1ace6d9b56990fdd29b370: no space left on device Oct 2 19:39:44.672504 kubelet[2004]: E1002 19:39:44.672331 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"cilium-operator\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\\\": mkdir /var/lib/containerd/io.containerd.content.v1.content/ingest/ea546312b09f3951a0bca8eb6855b5d9402f70940f1ace6d9b56990fdd29b370: no space left on device\"" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" podUID=edaa949e-acbb-4a34-9745-6deb560ba5fd Oct 2 19:39:45.573602 kubelet[2004]: E1002 19:39:45.573569 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:45.574333 kubelet[2004]: E1002 19:39:45.574274 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"cilium-operator\" with ImagePullBackOff: \"Back-off pulling image \\\"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\\\"\"" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" podUID=edaa949e-acbb-4a34-9745-6deb560ba5fd Oct 2 19:39:57.473453 kubelet[2004]: E1002 19:39:57.473411 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:39:57.474776 env[1098]: time="2023-10-02T19:39:57.474743721Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:39:58.473887 kubelet[2004]: E1002 19:39:58.473661 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:02.711365 systemd[1]: Started sshd@7-10.0.0.10:22-10.0.0.1:39376.service. Oct 2 19:40:02.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.10:22-10.0.0.1:39376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:02.712539 kernel: kauditd_printk_skb: 345 callbacks suppressed Oct 2 19:40:02.712671 kernel: audit: type=1130 audit(1696275602.710:1073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.10:22-10.0.0.1:39376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:02.747000 audit[2420]: USER_ACCT pid=2420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:02.751147 kernel: audit: type=1101 audit(1696275602.747:1074): pid=2420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:02.751183 sshd[2420]: Accepted publickey for core from 10.0.0.1 port 39376 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:40:02.750000 audit[2420]: CRED_ACQ pid=2420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:02.751639 sshd[2420]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:02.758435 kernel: audit: type=1103 audit(1696275602.750:1075): pid=2420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:02.758525 kernel: audit: type=1006 audit(1696275602.750:1076): pid=2420 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:40:02.758555 kernel: audit: type=1300 audit(1696275602.750:1076): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff125a4560 a2=3 a3=0 items=0 ppid=1 pid=2420 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:02.750000 audit[2420]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff125a4560 a2=3 a3=0 items=0 ppid=1 pid=2420 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:02.757074 systemd-logind[1087]: New session 8 of user core. Oct 2 19:40:02.758057 systemd[1]: Started session-8.scope. Oct 2 19:40:02.750000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:02.761172 kernel: audit: type=1327 audit(1696275602.750:1076): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:02.769713 kernel: audit: type=1105 audit(1696275602.762:1077): pid=2420 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:02.769781 kernel: audit: type=1103 audit(1696275602.764:1078): pid=2422 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:02.762000 audit[2420]: USER_START pid=2420 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:02.764000 audit[2422]: CRED_ACQ pid=2422 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:02.997668 sshd[2420]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:02.998000 audit[2420]: USER_END pid=2420 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:03.000749 systemd[1]: sshd@7-10.0.0.10:22-10.0.0.1:39376.service: Deactivated successfully. Oct 2 19:40:03.001431 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:40:02.998000 audit[2420]: CRED_DISP pid=2420 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:03.005752 kernel: audit: type=1106 audit(1696275602.998:1079): pid=2420 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:03.005809 kernel: audit: type=1104 audit(1696275602.998:1080): pid=2420 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:02.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.10:22-10.0.0.1:39376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:03.006544 systemd-logind[1087]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:40:03.007329 systemd-logind[1087]: Removed session 8. Oct 2 19:40:04.206580 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2365082319.mount: Deactivated successfully. Oct 2 19:40:05.550360 kubelet[2004]: I1002 19:40:05.550323 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:40:05.550360 kubelet[2004]: I1002 19:40:05.550365 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:40:05.570370 kubelet[2004]: I1002 19:40:05.569735 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:40:05.576868 kubelet[2004]: I1002 19:40:05.576479 2004 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7" size=102542580 Oct 2 19:40:05.577044 env[1098]: time="2023-10-02T19:40:05.576738464Z" level=info msg="RemoveImage \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:40:05.650635 env[1098]: time="2023-10-02T19:40:05.650345359Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.6-0,XXX_unrecognized:[],}" Oct 2 19:40:05.665759 env[1098]: time="2023-10-02T19:40:05.665498823Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,XXX_unrecognized:[],}" Oct 2 19:40:05.685329 env[1098]: time="2023-10-02T19:40:05.685065943Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,XXX_unrecognized:[],}" Oct 2 19:40:05.799304 env[1098]: time="2023-10-02T19:40:05.799218351Z" level=info msg="RemoveImage \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\" returns successfully" Oct 2 19:40:05.799706 kubelet[2004]: I1002 19:40:05.799671 2004 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a" size=14837849 Oct 2 19:40:05.799984 env[1098]: time="2023-10-02T19:40:05.799950229Z" level=info msg="RemoveImage \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:40:05.818991 env[1098]: time="2023-10-02T19:40:05.810407433Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.9.3,XXX_unrecognized:[],}" Oct 2 19:40:05.818991 env[1098]: time="2023-10-02T19:40:05.815355118Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,XXX_unrecognized:[],}" Oct 2 19:40:05.818991 env[1098]: time="2023-10-02T19:40:05.815422270Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,XXX_unrecognized:[],}" Oct 2 19:40:05.847719 env[1098]: time="2023-10-02T19:40:05.847646967Z" level=info msg="RemoveImage \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\" returns successfully" Oct 2 19:40:05.848017 kubelet[2004]: I1002 19:40:05.847982 2004 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" size=301773 Oct 2 19:40:05.848323 env[1098]: time="2023-10-02T19:40:05.848296875Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\"" Oct 2 19:40:05.851214 env[1098]: time="2023-10-02T19:40:05.851182606Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:40:05.857980 env[1098]: time="2023-10-02T19:40:05.856121395Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:40:05.858265 env[1098]: time="2023-10-02T19:40:05.858232333Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,XXX_unrecognized:[],}" Oct 2 19:40:05.860981 env[1098]: time="2023-10-02T19:40:05.860939825Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\" returns successfully" Oct 2 19:40:05.869966 kubelet[2004]: I1002 19:40:05.869913 2004 eviction_manager.go:352] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:40:10.110000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:10.118607 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:10.118691 kernel: audit: type=1400 audit(1696275610.110:1082): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:10.110000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00291ee40 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:40:10.124576 kernel: audit: type=1300 audit(1696275610.110:1082): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00291ee40 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:40:10.124732 kernel: audit: type=1327 audit(1696275610.110:1082): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:10.110000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:10.110000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:10.129608 kernel: audit: type=1400 audit(1696275610.110:1083): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:10.129669 kernel: audit: type=1300 audit(1696275610.110:1083): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002850680 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:40:10.110000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002850680 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:40:10.110000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:10.161411 kernel: audit: type=1327 audit(1696275610.110:1083): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:11.275098 kernel: audit: type=1400 audit(1696275610.974:1084): avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:11.275218 kernel: audit: type=1300 audit(1696275610.974:1084): arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c0025de180 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:40:11.275246 kernel: audit: type=1327 audit(1696275610.974:1084): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:40:11.275267 kernel: audit: type=1400 audit(1696275610.974:1085): avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:10.974000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:10.974000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c0025de180 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:40:10.974000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:40:10.974000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:10.974000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c009bf0120 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:40:10.974000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:40:10.974000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:10.974000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c009b77890 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:40:10.974000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:40:10.974000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:10.974000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c009bf0180 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:40:10.974000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:40:10.981000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:10.981000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c009ad2510 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:40:10.981000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:40:10.981000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:10.981000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c0025de1a0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:40:10.981000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:40:11.518827 env[1098]: time="2023-10-02T19:40:11.518753707Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:40:11.904467 env[1098]: time="2023-10-02T19:40:11.904404430Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:40:12.108160 env[1098]: time="2023-10-02T19:40:12.108105545Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:40:12.108658 env[1098]: time="2023-10-02T19:40:12.108623441Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:40:12.111050 env[1098]: time="2023-10-02T19:40:12.109775099Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:40:12.111050 env[1098]: time="2023-10-02T19:40:12.110581412Z" level=info msg="CreateContainer within sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:40:12.529916 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2457479030.mount: Deactivated successfully. Oct 2 19:40:13.002333 systemd[1]: Started sshd@8-10.0.0.10:22-10.0.0.1:50954.service. Oct 2 19:40:13.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.10:22-10.0.0.1:50954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:13.033000 audit[2434]: USER_ACCT pid=2434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:13.034154 sshd[2434]: Accepted publickey for core from 10.0.0.1 port 50954 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:40:13.034000 audit[2434]: CRED_ACQ pid=2434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:13.035000 audit[2434]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec6eaf610 a2=3 a3=0 items=0 ppid=1 pid=2434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:13.035000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:13.035345 sshd[2434]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:13.038525 systemd-logind[1087]: New session 9 of user core. Oct 2 19:40:13.039425 systemd[1]: Started session-9.scope. Oct 2 19:40:13.043000 audit[2434]: USER_START pid=2434 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:13.044000 audit[2436]: CRED_ACQ pid=2436 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:13.182755 env[1098]: time="2023-10-02T19:40:13.182692217Z" level=info msg="CreateContainer within sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d\"" Oct 2 19:40:13.183343 env[1098]: time="2023-10-02T19:40:13.183197571Z" level=info msg="StartContainer for \"da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d\"" Oct 2 19:40:13.202088 systemd[1]: Started cri-containerd-da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d.scope. Oct 2 19:40:13.212576 systemd[1]: cri-containerd-da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d.scope: Deactivated successfully. Oct 2 19:40:13.215775 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d-rootfs.mount: Deactivated successfully. Oct 2 19:40:13.264372 sshd[2434]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:13.265000 audit[2434]: USER_END pid=2434 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:13.265000 audit[2434]: CRED_DISP pid=2434 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:13.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.10:22-10.0.0.1:50954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:13.267019 systemd[1]: sshd@8-10.0.0.10:22-10.0.0.1:50954.service: Deactivated successfully. Oct 2 19:40:13.267706 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:40:13.268230 systemd-logind[1087]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:40:13.268868 systemd-logind[1087]: Removed session 9. Oct 2 19:40:13.580815 env[1098]: time="2023-10-02T19:40:13.580653092Z" level=info msg="shim disconnected" id=da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d Oct 2 19:40:13.580815 env[1098]: time="2023-10-02T19:40:13.580721370Z" level=warning msg="cleaning up after shim disconnected" id=da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d namespace=k8s.io Oct 2 19:40:13.580815 env[1098]: time="2023-10-02T19:40:13.580738131Z" level=info msg="cleaning up dead shim" Oct 2 19:40:13.588076 env[1098]: time="2023-10-02T19:40:13.588008386Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:40:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2471 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:40:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:40:13.588400 env[1098]: time="2023-10-02T19:40:13.588279062Z" level=error msg="copy shim log" error="read /proc/self/fd/54: file already closed" Oct 2 19:40:13.588563 env[1098]: time="2023-10-02T19:40:13.588515834Z" level=error msg="Failed to pipe stderr of container \"da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d\"" error="reading from a closed fifo" Oct 2 19:40:13.588800 env[1098]: time="2023-10-02T19:40:13.588747707Z" level=error msg="Failed to pipe stdout of container \"da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d\"" error="reading from a closed fifo" Oct 2 19:40:13.593353 env[1098]: time="2023-10-02T19:40:13.593306099Z" level=error msg="StartContainer for \"da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:40:13.593594 kubelet[2004]: E1002 19:40:13.593548 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d" Oct 2 19:40:13.593894 kubelet[2004]: E1002 19:40:13.593682 2004 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:40:13.593894 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:40:13.593894 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:40:13.593894 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cl5hh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:40:13.593894 kubelet[2004]: E1002 19:40:13.593721 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:40:13.634214 kubelet[2004]: E1002 19:40:13.634171 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:13.636212 env[1098]: time="2023-10-02T19:40:13.636154682Z" level=info msg="CreateContainer within sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:40:13.652091 env[1098]: time="2023-10-02T19:40:13.652022321Z" level=info msg="CreateContainer within sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb\"" Oct 2 19:40:13.652660 env[1098]: time="2023-10-02T19:40:13.652618876Z" level=info msg="StartContainer for \"06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb\"" Oct 2 19:40:13.666235 systemd[1]: Started cri-containerd-06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb.scope. Oct 2 19:40:13.675044 systemd[1]: cri-containerd-06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb.scope: Deactivated successfully. Oct 2 19:40:13.675328 systemd[1]: Stopped cri-containerd-06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb.scope. Oct 2 19:40:13.678524 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb-rootfs.mount: Deactivated successfully. Oct 2 19:40:13.683911 env[1098]: time="2023-10-02T19:40:13.683842972Z" level=info msg="shim disconnected" id=06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb Oct 2 19:40:13.683911 env[1098]: time="2023-10-02T19:40:13.683912912Z" level=warning msg="cleaning up after shim disconnected" id=06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb namespace=k8s.io Oct 2 19:40:13.684146 env[1098]: time="2023-10-02T19:40:13.683926367Z" level=info msg="cleaning up dead shim" Oct 2 19:40:13.690568 env[1098]: time="2023-10-02T19:40:13.690512145Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:40:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2506 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:40:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:40:13.690848 env[1098]: time="2023-10-02T19:40:13.690783943Z" level=error msg="copy shim log" error="read /proc/self/fd/54: file already closed" Oct 2 19:40:13.691070 env[1098]: time="2023-10-02T19:40:13.691003493Z" level=error msg="Failed to pipe stdout of container \"06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb\"" error="reading from a closed fifo" Oct 2 19:40:13.691164 env[1098]: time="2023-10-02T19:40:13.691122284Z" level=error msg="Failed to pipe stderr of container \"06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb\"" error="reading from a closed fifo" Oct 2 19:40:13.693684 env[1098]: time="2023-10-02T19:40:13.693626441Z" level=error msg="StartContainer for \"06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:40:13.693879 kubelet[2004]: E1002 19:40:13.693851 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb" Oct 2 19:40:13.694000 kubelet[2004]: E1002 19:40:13.693982 2004 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:40:13.694000 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:40:13.694000 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:40:13.694000 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cl5hh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:40:13.694184 kubelet[2004]: E1002 19:40:13.694021 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:40:14.425600 kubelet[2004]: I1002 19:40:14.425568 2004 scope.go:115] "RemoveContainer" containerID="da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d" Oct 2 19:40:14.426459 env[1098]: time="2023-10-02T19:40:14.426421976Z" level=info msg="RemoveContainer for \"da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d\"" Oct 2 19:40:14.449023 env[1098]: time="2023-10-02T19:40:14.448976506Z" level=info msg="RemoveContainer for \"da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d\" returns successfully" Oct 2 19:40:14.636748 kubelet[2004]: E1002 19:40:14.636723 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:14.637831 kubelet[2004]: E1002 19:40:14.637816 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:40:15.216164 env[1098]: time="2023-10-02T19:40:15.216104255Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:40:15.217787 env[1098]: time="2023-10-02T19:40:15.217731641Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:40:15.219221 env[1098]: time="2023-10-02T19:40:15.219175363Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:40:15.219618 env[1098]: time="2023-10-02T19:40:15.219583117Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:40:15.221299 env[1098]: time="2023-10-02T19:40:15.221266127Z" level=info msg="CreateContainer within sandbox \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:40:15.232837 env[1098]: time="2023-10-02T19:40:15.232796692Z" level=info msg="CreateContainer within sandbox \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\"" Oct 2 19:40:15.233431 env[1098]: time="2023-10-02T19:40:15.233381517Z" level=info msg="StartContainer for \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\"" Oct 2 19:40:15.249122 systemd[1]: Started cri-containerd-7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d.scope. Oct 2 19:40:15.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262065 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:40:15.262197 kernel: audit: type=1400 audit(1696275615.257:1099): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262219 kernel: audit: type=1400 audit(1696275615.257:1100): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.264670 kernel: audit: type=1400 audit(1696275615.257:1101): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.266941 kernel: audit: type=1400 audit(1696275615.257:1102): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.271387 kernel: audit: type=1400 audit(1696275615.257:1103): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.271427 kernel: audit: type=1400 audit(1696275615.257:1104): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.271449 kernel: audit: type=1400 audit(1696275615.257:1105): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.275199 kernel: audit: type=1400 audit(1696275615.257:1106): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.275239 kernel: audit: type=1400 audit(1696275615.257:1107): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.279234 kernel: audit: type=1400 audit(1696275615.260:1108): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit: BPF prog-id=124 op=LOAD Oct 2 19:40:15.260000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit[2528]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2169 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:15.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764376165343838326533373434363535363130383363383935306439 Oct 2 19:40:15.260000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit[2528]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2169 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:15.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764376165343838326533373434363535363130383363383935306439 Oct 2 19:40:15.260000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.260000 audit: BPF prog-id=125 op=LOAD Oct 2 19:40:15.260000 audit[2528]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000024ea0 items=0 ppid=2169 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:15.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764376165343838326533373434363535363130383363383935306439 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit: BPF prog-id=126 op=LOAD Oct 2 19:40:15.262000 audit[2528]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000024ee8 items=0 ppid=2169 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:15.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764376165343838326533373434363535363130383363383935306439 Oct 2 19:40:15.262000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:40:15.262000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:40:15.262000 audit: BPF prog-id=127 op=LOAD Oct 2 19:40:15.262000 audit[2528]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0000252f8 items=0 ppid=2169 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:15.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764376165343838326533373434363535363130383363383935306439 Oct 2 19:40:15.287432 env[1098]: time="2023-10-02T19:40:15.287380280Z" level=info msg="StartContainer for \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\" returns successfully" Oct 2 19:40:15.305000 audit[2538]: AVC avc: denied { map_create } for pid=2538 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c11,c743 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c11,c743 tclass=bpf permissive=0 Oct 2 19:40:15.305000 audit[2538]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c00016d7d0 a2=48 a3=0 items=0 ppid=2169 pid=2538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c11,c743 key=(null) Oct 2 19:40:15.305000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:40:15.639843 kubelet[2004]: E1002 19:40:15.639734 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:15.886000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:15.886000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0024b0000 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:40:15.886000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:15.886000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:15.886000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00267a1c0 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:40:15.886000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:15.886000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:15.886000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0024b0120 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:40:15.886000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:15.887000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:15.887000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00299c000 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:40:15.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:16.685063 kubelet[2004]: W1002 19:40:16.684959 2004 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod09d97a73_9473_483a_a374_8fd76b1aee59.slice/cri-containerd-da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d.scope WatchSource:0}: container "da8b184eab1c6444ac93bf49b96e12edcf2064a731ff68ab6a695fec3ede9b4d" in namespace "k8s.io": not found Oct 2 19:40:19.791669 kubelet[2004]: W1002 19:40:19.791624 2004 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod09d97a73_9473_483a_a374_8fd76b1aee59.slice/cri-containerd-06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb.scope WatchSource:0}: task 06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb not found: not found Oct 2 19:40:19.800520 kubelet[2004]: I1002 19:40:19.800495 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:40:19.800520 kubelet[2004]: I1002 19:40:19.800531 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:40:19.801483 kubelet[2004]: I1002 19:40:19.801459 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:40:19.809245 kubelet[2004]: I1002 19:40:19.809231 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:40:19.809341 kubelet[2004]: I1002 19:40:19.809291 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:40:19.809341 kubelet[2004]: E1002 19:40:19.809314 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:40:19.809341 kubelet[2004]: E1002 19:40:19.809324 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:40:19.809341 kubelet[2004]: E1002 19:40:19.809332 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:40:19.809341 kubelet[2004]: E1002 19:40:19.809339 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:40:19.809443 kubelet[2004]: E1002 19:40:19.809347 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:40:19.809443 kubelet[2004]: E1002 19:40:19.809355 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:40:19.809443 kubelet[2004]: I1002 19:40:19.809363 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:40:23.268782 systemd[1]: Started sshd@9-10.0.0.10:22-10.0.0.1:56914.service. Oct 2 19:40:23.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.10:22-10.0.0.1:56914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:23.269553 kernel: kauditd_printk_skb: 62 callbacks suppressed Oct 2 19:40:23.269609 kernel: audit: type=1130 audit(1696275623.267:1122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.10:22-10.0.0.1:56914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:23.305000 audit[2560]: USER_ACCT pid=2560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:23.306521 sshd[2560]: Accepted publickey for core from 10.0.0.1 port 56914 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:40:23.308576 sshd[2560]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:23.307000 audit[2560]: CRED_ACQ pid=2560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:23.316384 kernel: audit: type=1101 audit(1696275623.305:1123): pid=2560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:23.316453 kernel: audit: type=1103 audit(1696275623.307:1124): pid=2560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:23.316469 kernel: audit: type=1006 audit(1696275623.307:1125): pid=2560 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:40:23.316486 kernel: audit: type=1300 audit(1696275623.307:1125): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff25fa8500 a2=3 a3=0 items=0 ppid=1 pid=2560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:23.316504 kernel: audit: type=1327 audit(1696275623.307:1125): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:23.307000 audit[2560]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff25fa8500 a2=3 a3=0 items=0 ppid=1 pid=2560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:23.307000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:23.312520 systemd-logind[1087]: New session 10 of user core. Oct 2 19:40:23.313362 systemd[1]: Started session-10.scope. Oct 2 19:40:23.316000 audit[2560]: USER_START pid=2560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:23.317000 audit[2562]: CRED_ACQ pid=2562 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:23.322649 kernel: audit: type=1105 audit(1696275623.316:1126): pid=2560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:23.322699 kernel: audit: type=1103 audit(1696275623.317:1127): pid=2562 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:23.425269 sshd[2560]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:23.425000 audit[2560]: USER_END pid=2560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:23.427247 systemd[1]: sshd@9-10.0.0.10:22-10.0.0.1:56914.service: Deactivated successfully. Oct 2 19:40:23.427870 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:40:23.428358 systemd-logind[1087]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:40:23.425000 audit[2560]: CRED_DISP pid=2560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:23.429094 systemd-logind[1087]: Removed session 10. Oct 2 19:40:23.431343 kernel: audit: type=1106 audit(1696275623.425:1128): pid=2560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:23.431395 kernel: audit: type=1104 audit(1696275623.425:1129): pid=2560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:23.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.10:22-10.0.0.1:56914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:26.473122 kubelet[2004]: E1002 19:40:26.473080 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:26.475737 env[1098]: time="2023-10-02T19:40:26.475694750Z" level=info msg="CreateContainer within sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:40:26.486199 kubelet[2004]: I1002 19:40:26.486155 2004 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" podStartSLOduration=-9.223371978368662e+09 pod.CreationTimestamp="2023-10-02 19:39:28 +0000 UTC" firstStartedPulling="2023-10-02 19:39:29.304102396 +0000 UTC m=+14.962302771" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:40:15.652495503 +0000 UTC m=+61.310695878" watchObservedRunningTime="2023-10-02 19:40:26.486113481 +0000 UTC m=+72.144313866" Oct 2 19:40:26.486403 env[1098]: time="2023-10-02T19:40:26.486359827Z" level=info msg="CreateContainer within sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f\"" Oct 2 19:40:26.486821 env[1098]: time="2023-10-02T19:40:26.486787175Z" level=info msg="StartContainer for \"f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f\"" Oct 2 19:40:26.502135 systemd[1]: Started cri-containerd-f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f.scope. Oct 2 19:40:26.507311 systemd[1]: cri-containerd-f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f.scope: Deactivated successfully. Oct 2 19:40:26.507548 systemd[1]: Stopped cri-containerd-f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f.scope. Oct 2 19:40:26.623734 env[1098]: time="2023-10-02T19:40:26.623682330Z" level=info msg="shim disconnected" id=f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f Oct 2 19:40:26.623734 env[1098]: time="2023-10-02T19:40:26.623727775Z" level=warning msg="cleaning up after shim disconnected" id=f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f namespace=k8s.io Oct 2 19:40:26.623734 env[1098]: time="2023-10-02T19:40:26.623735671Z" level=info msg="cleaning up dead shim" Oct 2 19:40:26.629582 env[1098]: time="2023-10-02T19:40:26.629535438Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:40:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2597 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:40:26Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:40:26.629846 env[1098]: time="2023-10-02T19:40:26.629786553Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 19:40:26.629986 env[1098]: time="2023-10-02T19:40:26.629954381Z" level=error msg="Failed to pipe stdout of container \"f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f\"" error="reading from a closed fifo" Oct 2 19:40:26.632099 env[1098]: time="2023-10-02T19:40:26.632071108Z" level=error msg="Failed to pipe stderr of container \"f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f\"" error="reading from a closed fifo" Oct 2 19:40:26.634488 env[1098]: time="2023-10-02T19:40:26.634458196Z" level=error msg="StartContainer for \"f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:40:26.634699 kubelet[2004]: E1002 19:40:26.634676 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f" Oct 2 19:40:26.634787 kubelet[2004]: E1002 19:40:26.634783 2004 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:40:26.634787 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:40:26.634787 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:40:26.634787 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cl5hh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:40:26.634960 kubelet[2004]: E1002 19:40:26.634817 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:40:26.657396 kubelet[2004]: I1002 19:40:26.657371 2004 scope.go:115] "RemoveContainer" containerID="06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb" Oct 2 19:40:26.657669 kubelet[2004]: I1002 19:40:26.657652 2004 scope.go:115] "RemoveContainer" containerID="06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb" Oct 2 19:40:26.658389 env[1098]: time="2023-10-02T19:40:26.658365407Z" level=info msg="RemoveContainer for \"06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb\"" Oct 2 19:40:26.658652 env[1098]: time="2023-10-02T19:40:26.658557050Z" level=info msg="RemoveContainer for \"06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb\"" Oct 2 19:40:26.658715 env[1098]: time="2023-10-02T19:40:26.658645697Z" level=error msg="RemoveContainer for \"06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb\" failed" error="failed to set removing state for container \"06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb\": container is already in removing state" Oct 2 19:40:26.658850 kubelet[2004]: E1002 19:40:26.658834 2004 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb\": container is already in removing state" containerID="06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb" Oct 2 19:40:26.658922 kubelet[2004]: E1002 19:40:26.658879 2004 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb": container is already in removing state; Skipping pod "cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)" Oct 2 19:40:26.658966 kubelet[2004]: E1002 19:40:26.658954 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:26.659696 kubelet[2004]: E1002 19:40:26.659218 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:40:26.664051 env[1098]: time="2023-10-02T19:40:26.663993741Z" level=info msg="RemoveContainer for \"06ded62d7610a317e7a866489d15ae79ce4f3f630bf6ba7a736494ff49becafb\" returns successfully" Oct 2 19:40:27.473764 kubelet[2004]: E1002 19:40:27.473728 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:27.481972 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f-rootfs.mount: Deactivated successfully. Oct 2 19:40:29.473348 kubelet[2004]: E1002 19:40:29.473321 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:29.728553 kubelet[2004]: W1002 19:40:29.728446 2004 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod09d97a73_9473_483a_a374_8fd76b1aee59.slice/cri-containerd-f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f.scope WatchSource:0}: task f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f not found: not found Oct 2 19:40:29.820711 kubelet[2004]: I1002 19:40:29.820679 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:40:29.820711 kubelet[2004]: I1002 19:40:29.820718 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:40:29.821584 kubelet[2004]: I1002 19:40:29.821563 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:40:29.831581 kubelet[2004]: I1002 19:40:29.831544 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:40:29.832059 kubelet[2004]: I1002 19:40:29.832043 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:40:29.832127 kubelet[2004]: E1002 19:40:29.832071 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:40:29.832127 kubelet[2004]: E1002 19:40:29.832090 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:40:29.832127 kubelet[2004]: E1002 19:40:29.832101 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:40:29.832241 kubelet[2004]: E1002 19:40:29.832169 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:40:29.832241 kubelet[2004]: E1002 19:40:29.832179 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:40:29.832241 kubelet[2004]: E1002 19:40:29.832200 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:40:29.832241 kubelet[2004]: I1002 19:40:29.832209 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:40:33.429402 systemd[1]: Started sshd@10-10.0.0.10:22-10.0.0.1:55470.service. Oct 2 19:40:33.430288 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:33.430333 kernel: audit: type=1130 audit(1696275633.428:1131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.10:22-10.0.0.1:55470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:33.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.10:22-10.0.0.1:55470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:33.461000 audit[2612]: USER_ACCT pid=2612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:33.462744 sshd[2612]: Accepted publickey for core from 10.0.0.1 port 55470 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:40:33.464511 sshd[2612]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:33.463000 audit[2612]: CRED_ACQ pid=2612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:33.467449 systemd-logind[1087]: New session 11 of user core. Oct 2 19:40:33.467966 kernel: audit: type=1101 audit(1696275633.461:1132): pid=2612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:33.468017 kernel: audit: type=1103 audit(1696275633.463:1133): pid=2612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:33.468065 kernel: audit: type=1006 audit(1696275633.463:1134): pid=2612 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:40:33.468151 systemd[1]: Started session-11.scope. Oct 2 19:40:33.463000 audit[2612]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd74b53260 a2=3 a3=0 items=0 ppid=1 pid=2612 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:33.472967 kernel: audit: type=1300 audit(1696275633.463:1134): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd74b53260 a2=3 a3=0 items=0 ppid=1 pid=2612 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:33.473008 kernel: audit: type=1327 audit(1696275633.463:1134): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:33.463000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:33.471000 audit[2612]: USER_START pid=2612 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:33.476660 kernel: audit: type=1105 audit(1696275633.471:1135): pid=2612 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:33.476698 kernel: audit: type=1103 audit(1696275633.472:1136): pid=2614 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:33.472000 audit[2614]: CRED_ACQ pid=2614 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:33.567942 sshd[2612]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:33.568000 audit[2612]: USER_END pid=2612 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:33.570194 systemd[1]: sshd@10-10.0.0.10:22-10.0.0.1:55470.service: Deactivated successfully. Oct 2 19:40:33.570960 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:40:33.571519 systemd-logind[1087]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:40:33.572251 systemd-logind[1087]: Removed session 11. Oct 2 19:40:33.568000 audit[2612]: CRED_DISP pid=2612 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:33.574928 kernel: audit: type=1106 audit(1696275633.568:1137): pid=2612 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:33.574975 kernel: audit: type=1104 audit(1696275633.568:1138): pid=2612 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:33.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.10:22-10.0.0.1:55470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:39.843808 kubelet[2004]: I1002 19:40:39.843769 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:40:39.843808 kubelet[2004]: I1002 19:40:39.843803 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:40:39.844834 kubelet[2004]: I1002 19:40:39.844812 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:40:39.852714 kubelet[2004]: I1002 19:40:39.852689 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:40:39.852791 kubelet[2004]: I1002 19:40:39.852768 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:40:39.852791 kubelet[2004]: E1002 19:40:39.852789 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:40:39.852834 kubelet[2004]: E1002 19:40:39.852799 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:40:39.852834 kubelet[2004]: E1002 19:40:39.852808 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:40:39.852834 kubelet[2004]: E1002 19:40:39.852817 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:40:39.852834 kubelet[2004]: E1002 19:40:39.852825 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:40:39.852834 kubelet[2004]: E1002 19:40:39.852833 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:40:39.852951 kubelet[2004]: I1002 19:40:39.852841 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:40:40.473048 kubelet[2004]: E1002 19:40:40.473008 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:40.473403 kubelet[2004]: E1002 19:40:40.473384 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:40:43.571436 systemd[1]: Started sshd@11-10.0.0.10:22-10.0.0.1:33322.service. Oct 2 19:40:43.574649 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:43.574683 kernel: audit: type=1130 audit(1696275643.570:1140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.10:22-10.0.0.1:33322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:43.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.10:22-10.0.0.1:33322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:43.601000 audit[2626]: USER_ACCT pid=2626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:43.603062 sshd[2626]: Accepted publickey for core from 10.0.0.1 port 33322 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:40:43.604371 sshd[2626]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:43.603000 audit[2626]: CRED_ACQ pid=2626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:43.607051 kernel: audit: type=1101 audit(1696275643.601:1141): pid=2626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:43.607104 kernel: audit: type=1103 audit(1696275643.603:1142): pid=2626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:43.607130 kernel: audit: type=1006 audit(1696275643.603:1143): pid=2626 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:40:43.607440 systemd-logind[1087]: New session 12 of user core. Oct 2 19:40:43.608407 systemd[1]: Started session-12.scope. Oct 2 19:40:43.603000 audit[2626]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6f4f43a0 a2=3 a3=0 items=0 ppid=1 pid=2626 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:43.610934 kernel: audit: type=1300 audit(1696275643.603:1143): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6f4f43a0 a2=3 a3=0 items=0 ppid=1 pid=2626 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:43.610984 kernel: audit: type=1327 audit(1696275643.603:1143): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:43.603000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:43.612000 audit[2626]: USER_START pid=2626 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:43.612000 audit[2628]: CRED_ACQ pid=2628 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:43.618040 kernel: audit: type=1105 audit(1696275643.612:1144): pid=2626 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:43.618088 kernel: audit: type=1103 audit(1696275643.612:1145): pid=2628 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:43.708602 sshd[2626]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:43.708000 audit[2626]: USER_END pid=2626 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:43.710703 systemd[1]: sshd@11-10.0.0.10:22-10.0.0.1:33322.service: Deactivated successfully. Oct 2 19:40:43.711325 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:40:43.711907 systemd-logind[1087]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:40:43.712591 systemd-logind[1087]: Removed session 12. Oct 2 19:40:43.708000 audit[2626]: CRED_DISP pid=2626 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:43.715644 kernel: audit: type=1106 audit(1696275643.708:1146): pid=2626 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:43.715693 kernel: audit: type=1104 audit(1696275643.708:1147): pid=2626 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:43.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.10:22-10.0.0.1:33322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:49.863956 kubelet[2004]: I1002 19:40:49.863909 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:40:49.863956 kubelet[2004]: I1002 19:40:49.863938 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:40:49.865071 kubelet[2004]: I1002 19:40:49.865006 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:40:49.873709 kubelet[2004]: I1002 19:40:49.873678 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:40:49.873837 kubelet[2004]: I1002 19:40:49.873769 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:40:49.873837 kubelet[2004]: E1002 19:40:49.873792 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:40:49.873837 kubelet[2004]: E1002 19:40:49.873807 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:40:49.873837 kubelet[2004]: E1002 19:40:49.873822 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:40:49.873837 kubelet[2004]: E1002 19:40:49.873833 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:40:49.873962 kubelet[2004]: E1002 19:40:49.873846 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:40:49.873962 kubelet[2004]: E1002 19:40:49.873856 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:40:49.873962 kubelet[2004]: I1002 19:40:49.873865 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:40:50.473850 kubelet[2004]: E1002 19:40:50.473808 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:51.473473 kubelet[2004]: E1002 19:40:51.473436 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:51.475439 env[1098]: time="2023-10-02T19:40:51.475404001Z" level=info msg="CreateContainer within sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:40:51.484566 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1462186751.mount: Deactivated successfully. Oct 2 19:40:51.488040 env[1098]: time="2023-10-02T19:40:51.487987423Z" level=info msg="CreateContainer within sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66\"" Oct 2 19:40:51.488421 env[1098]: time="2023-10-02T19:40:51.488394245Z" level=info msg="StartContainer for \"b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66\"" Oct 2 19:40:51.503251 systemd[1]: run-containerd-runc-k8s.io-b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66-runc.d9y0PW.mount: Deactivated successfully. Oct 2 19:40:51.504415 systemd[1]: Started cri-containerd-b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66.scope. Oct 2 19:40:51.510371 systemd[1]: cri-containerd-b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66.scope: Deactivated successfully. Oct 2 19:40:51.510605 systemd[1]: Stopped cri-containerd-b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66.scope. Oct 2 19:40:51.520307 env[1098]: time="2023-10-02T19:40:51.520262474Z" level=info msg="shim disconnected" id=b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66 Oct 2 19:40:51.520307 env[1098]: time="2023-10-02T19:40:51.520306529Z" level=warning msg="cleaning up after shim disconnected" id=b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66 namespace=k8s.io Oct 2 19:40:51.520479 env[1098]: time="2023-10-02T19:40:51.520315345Z" level=info msg="cleaning up dead shim" Oct 2 19:40:51.526626 env[1098]: time="2023-10-02T19:40:51.526577019Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:40:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2662 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:40:51Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:40:51.526892 env[1098]: time="2023-10-02T19:40:51.526828972Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:40:51.530116 env[1098]: time="2023-10-02T19:40:51.530081207Z" level=error msg="Failed to pipe stdout of container \"b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66\"" error="reading from a closed fifo" Oct 2 19:40:51.530257 env[1098]: time="2023-10-02T19:40:51.530205626Z" level=error msg="Failed to pipe stderr of container \"b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66\"" error="reading from a closed fifo" Oct 2 19:40:51.532445 env[1098]: time="2023-10-02T19:40:51.532392095Z" level=error msg="StartContainer for \"b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:40:51.532616 kubelet[2004]: E1002 19:40:51.532587 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66" Oct 2 19:40:51.532695 kubelet[2004]: E1002 19:40:51.532688 2004 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:40:51.532695 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:40:51.532695 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:40:51.532695 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cl5hh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:40:51.532831 kubelet[2004]: E1002 19:40:51.532722 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:40:51.690315 kubelet[2004]: I1002 19:40:51.690287 2004 scope.go:115] "RemoveContainer" containerID="f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f" Oct 2 19:40:51.690623 kubelet[2004]: I1002 19:40:51.690593 2004 scope.go:115] "RemoveContainer" containerID="f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f" Oct 2 19:40:51.691219 env[1098]: time="2023-10-02T19:40:51.691165062Z" level=info msg="RemoveContainer for \"f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f\"" Oct 2 19:40:51.691489 env[1098]: time="2023-10-02T19:40:51.691459948Z" level=info msg="RemoveContainer for \"f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f\"" Oct 2 19:40:51.691582 env[1098]: time="2023-10-02T19:40:51.691551634Z" level=error msg="RemoveContainer for \"f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f\" failed" error="failed to set removing state for container \"f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f\": container is already in removing state" Oct 2 19:40:51.691699 kubelet[2004]: E1002 19:40:51.691680 2004 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f\": container is already in removing state" containerID="f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f" Oct 2 19:40:51.691732 kubelet[2004]: E1002 19:40:51.691715 2004 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f": container is already in removing state; Skipping pod "cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)" Oct 2 19:40:51.691783 kubelet[2004]: E1002 19:40:51.691772 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:51.692021 kubelet[2004]: E1002 19:40:51.692005 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:40:51.694229 env[1098]: time="2023-10-02T19:40:51.694197876Z" level=info msg="RemoveContainer for \"f249c0247da68ce6c08ffcff07628919d692b6d3ac421e76541dcc329d41ce3f\" returns successfully" Oct 2 19:40:52.482432 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66-rootfs.mount: Deactivated successfully. Oct 2 19:40:53.712828 systemd[1]: Started sshd@12-10.0.0.10:22-10.0.0.1:59476.service. Oct 2 19:40:53.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.10:22-10.0.0.1:59476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:53.716634 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:53.716706 kernel: audit: type=1130 audit(1696275653.712:1149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.10:22-10.0.0.1:59476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:53.744000 audit[2675]: USER_ACCT pid=2675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:53.745215 sshd[2675]: Accepted publickey for core from 10.0.0.1 port 59476 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:40:53.747502 sshd[2675]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:53.747000 audit[2675]: CRED_ACQ pid=2675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:53.750591 kernel: audit: type=1101 audit(1696275653.744:1150): pid=2675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:53.750646 kernel: audit: type=1103 audit(1696275653.747:1151): pid=2675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:53.750674 kernel: audit: type=1006 audit(1696275653.747:1152): pid=2675 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:40:53.751049 systemd-logind[1087]: New session 13 of user core. Oct 2 19:40:53.752674 kernel: audit: type=1300 audit(1696275653.747:1152): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbc53cca0 a2=3 a3=0 items=0 ppid=1 pid=2675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:53.747000 audit[2675]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbc53cca0 a2=3 a3=0 items=0 ppid=1 pid=2675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:53.752009 systemd[1]: Started session-13.scope. Oct 2 19:40:53.755971 kernel: audit: type=1327 audit(1696275653.747:1152): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:53.747000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:53.756000 audit[2675]: USER_START pid=2675 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:53.759945 kernel: audit: type=1105 audit(1696275653.756:1153): pid=2675 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:53.759993 kernel: audit: type=1103 audit(1696275653.757:1154): pid=2677 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:53.757000 audit[2677]: CRED_ACQ pid=2677 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:53.852995 sshd[2675]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:53.854000 audit[2675]: USER_END pid=2675 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:53.855276 systemd[1]: sshd@12-10.0.0.10:22-10.0.0.1:59476.service: Deactivated successfully. Oct 2 19:40:53.856188 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:40:53.854000 audit[2675]: CRED_DISP pid=2675 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:53.857483 systemd-logind[1087]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:40:53.858379 systemd-logind[1087]: Removed session 13. Oct 2 19:40:53.859068 kernel: audit: type=1106 audit(1696275653.854:1155): pid=2675 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:53.859148 kernel: audit: type=1104 audit(1696275653.854:1156): pid=2675 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:40:53.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.10:22-10.0.0.1:59476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:54.624326 kubelet[2004]: W1002 19:40:54.624295 2004 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod09d97a73_9473_483a_a374_8fd76b1aee59.slice/cri-containerd-b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66.scope WatchSource:0}: task b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66 not found: not found Oct 2 19:40:58.473887 kubelet[2004]: E1002 19:40:58.473849 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:40:59.883656 kubelet[2004]: I1002 19:40:59.883633 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:40:59.883656 kubelet[2004]: I1002 19:40:59.883659 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:40:59.884627 kubelet[2004]: I1002 19:40:59.884609 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:40:59.891867 kubelet[2004]: I1002 19:40:59.891845 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:40:59.891968 kubelet[2004]: I1002 19:40:59.891913 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:40:59.891968 kubelet[2004]: E1002 19:40:59.891932 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:40:59.891968 kubelet[2004]: E1002 19:40:59.891943 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:40:59.891968 kubelet[2004]: E1002 19:40:59.891952 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:40:59.891968 kubelet[2004]: E1002 19:40:59.891960 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:40:59.891968 kubelet[2004]: E1002 19:40:59.891969 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:40:59.892120 kubelet[2004]: E1002 19:40:59.891977 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:40:59.892120 kubelet[2004]: I1002 19:40:59.891985 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:41:03.857333 systemd[1]: Started sshd@13-10.0.0.10:22-10.0.0.1:52422.service. Oct 2 19:41:03.858325 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:03.858375 kernel: audit: type=1130 audit(1696275663.856:1158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.10:22-10.0.0.1:52422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:03.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.10:22-10.0.0.1:52422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:03.888000 audit[2691]: USER_ACCT pid=2691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:03.889439 sshd[2691]: Accepted publickey for core from 10.0.0.1 port 52422 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:41:03.890000 audit[2691]: CRED_ACQ pid=2691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:03.892143 sshd[2691]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:03.894214 kernel: audit: type=1101 audit(1696275663.888:1159): pid=2691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:03.894272 kernel: audit: type=1103 audit(1696275663.890:1160): pid=2691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:03.894320 kernel: audit: type=1006 audit(1696275663.890:1161): pid=2691 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:41:03.895053 systemd-logind[1087]: New session 14 of user core. Oct 2 19:41:03.897060 kernel: audit: type=1300 audit(1696275663.890:1161): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc43c0d370 a2=3 a3=0 items=0 ppid=1 pid=2691 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:03.890000 audit[2691]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc43c0d370 a2=3 a3=0 items=0 ppid=1 pid=2691 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:03.895744 systemd[1]: Started session-14.scope. Oct 2 19:41:03.898136 kernel: audit: type=1327 audit(1696275663.890:1161): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:03.890000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:03.898000 audit[2691]: USER_START pid=2691 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:03.899000 audit[2693]: CRED_ACQ pid=2693 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:03.904282 kernel: audit: type=1105 audit(1696275663.898:1162): pid=2691 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:03.904335 kernel: audit: type=1103 audit(1696275663.899:1163): pid=2693 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:03.988584 sshd[2691]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:03.988000 audit[2691]: USER_END pid=2691 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:03.990385 systemd[1]: sshd@13-10.0.0.10:22-10.0.0.1:52422.service: Deactivated successfully. Oct 2 19:41:03.991105 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:41:03.991610 systemd-logind[1087]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:41:03.988000 audit[2691]: CRED_DISP pid=2691 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:03.992244 systemd-logind[1087]: Removed session 14. Oct 2 19:41:03.994379 kernel: audit: type=1106 audit(1696275663.988:1164): pid=2691 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:03.994443 kernel: audit: type=1104 audit(1696275663.988:1165): pid=2691 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:03.988000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.10:22-10.0.0.1:52422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:04.474022 kubelet[2004]: E1002 19:41:04.473979 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:41:04.474343 kubelet[2004]: E1002 19:41:04.474277 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:41:09.901068 kubelet[2004]: I1002 19:41:09.901044 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:41:09.901068 kubelet[2004]: I1002 19:41:09.901070 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:41:09.902130 kubelet[2004]: I1002 19:41:09.902117 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:41:09.910003 kubelet[2004]: I1002 19:41:09.909980 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:41:09.910117 kubelet[2004]: I1002 19:41:09.910086 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:41:09.910117 kubelet[2004]: E1002 19:41:09.910114 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:41:09.910206 kubelet[2004]: E1002 19:41:09.910130 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:41:09.910206 kubelet[2004]: E1002 19:41:09.910143 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:41:09.910206 kubelet[2004]: E1002 19:41:09.910165 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:41:09.910206 kubelet[2004]: E1002 19:41:09.910178 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:41:09.910206 kubelet[2004]: E1002 19:41:09.910189 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:41:09.910206 kubelet[2004]: I1002 19:41:09.910202 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:41:10.110000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.112297 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:10.112351 kernel: audit: type=1400 audit(1696275670.110:1167): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.110000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.116885 kernel: audit: type=1400 audit(1696275670.110:1168): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.116915 kernel: audit: type=1300 audit(1696275670.110:1168): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000df1530 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:41:10.110000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000df1530 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:41:10.110000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000bd64c0 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:41:10.122921 kernel: audit: type=1300 audit(1696275670.110:1167): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000bd64c0 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:41:10.122948 kernel: audit: type=1327 audit(1696275670.110:1167): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:10.110000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:10.110000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:10.128006 kernel: audit: type=1327 audit(1696275670.110:1168): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:10.974000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.974000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.980179 kernel: audit: type=1400 audit(1696275670.974:1169): avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.980243 kernel: audit: type=1400 audit(1696275670.974:1170): avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.980268 kernel: audit: type=1400 audit(1696275670.974:1171): avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.974000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.982522 kernel: audit: type=1300 audit(1696275670.974:1169): arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00f20f0b0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:41:10.974000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00f20f0b0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:41:10.974000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00ef87c20 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:41:10.974000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=59 a1=c00f0d06e0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:41:10.974000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:41:10.974000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:41:10.974000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:41:10.974000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.974000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00f1a4030 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:41:10.974000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:41:10.981000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.981000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00f0cf160 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:41:10.981000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:41:10.981000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:10.981000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00f148210 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:41:10.981000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:41:13.993018 systemd[1]: Started sshd@14-10.0.0.10:22-10.0.0.1:35180.service. Oct 2 19:41:13.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.10:22-10.0.0.1:35180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:14.021000 audit[2705]: USER_ACCT pid=2705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:14.022902 sshd[2705]: Accepted publickey for core from 10.0.0.1 port 35180 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:41:14.022000 audit[2705]: CRED_ACQ pid=2705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:14.022000 audit[2705]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe78220660 a2=3 a3=0 items=0 ppid=1 pid=2705 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:14.022000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:14.023684 sshd[2705]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:14.026495 systemd-logind[1087]: New session 15 of user core. Oct 2 19:41:14.027415 systemd[1]: Started session-15.scope. Oct 2 19:41:14.031000 audit[2705]: USER_START pid=2705 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:14.031000 audit[2707]: CRED_ACQ pid=2707 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:14.120795 sshd[2705]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:14.120000 audit[2705]: USER_END pid=2705 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:14.120000 audit[2705]: CRED_DISP pid=2705 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:14.122611 systemd[1]: sshd@14-10.0.0.10:22-10.0.0.1:35180.service: Deactivated successfully. Oct 2 19:41:14.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.10:22-10.0.0.1:35180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:14.123359 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:41:14.123851 systemd-logind[1087]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:41:14.124482 systemd-logind[1087]: Removed session 15. Oct 2 19:41:14.508881 kubelet[2004]: E1002 19:41:14.508844 2004 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:41:14.523393 kubelet[2004]: E1002 19:41:14.523376 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:15.888101 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:41:15.888215 kernel: audit: type=1400 audit(1696275675.887:1185): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:15.887000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:15.887000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:15.892676 kernel: audit: type=1400 audit(1696275675.887:1184): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:15.892731 kernel: audit: type=1300 audit(1696275675.887:1184): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00138ed60 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:41:15.887000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00138ed60 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:41:15.895762 kernel: audit: type=1300 audit(1696275675.887:1185): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000bd6b00 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:41:15.887000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000bd6b00 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:41:15.898811 kernel: audit: type=1327 audit(1696275675.887:1184): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:15.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:15.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:15.903985 kernel: audit: type=1327 audit(1696275675.887:1185): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:15.904017 kernel: audit: type=1400 audit(1696275675.887:1186): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:15.887000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:15.887000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00138ed80 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:41:15.909411 kernel: audit: type=1300 audit(1696275675.887:1186): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00138ed80 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:41:15.909440 kernel: audit: type=1327 audit(1696275675.887:1186): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:15.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:15.887000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:15.914267 kernel: audit: type=1400 audit(1696275675.887:1187): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:15.887000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000bd6d40 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:41:15.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:19.474365 kubelet[2004]: E1002 19:41:19.474317 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:41:19.474780 kubelet[2004]: E1002 19:41:19.474609 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:41:19.524135 kubelet[2004]: E1002 19:41:19.524104 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:19.923093 kubelet[2004]: I1002 19:41:19.922790 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:41:19.923093 kubelet[2004]: I1002 19:41:19.922819 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:41:19.924311 kubelet[2004]: I1002 19:41:19.924272 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:41:19.933611 kubelet[2004]: I1002 19:41:19.933581 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:41:19.933771 kubelet[2004]: I1002 19:41:19.933665 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:41:19.933771 kubelet[2004]: E1002 19:41:19.933687 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:41:19.933771 kubelet[2004]: E1002 19:41:19.933698 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:41:19.933771 kubelet[2004]: E1002 19:41:19.933708 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:41:19.933771 kubelet[2004]: E1002 19:41:19.933716 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:41:19.933771 kubelet[2004]: E1002 19:41:19.933726 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:41:19.933771 kubelet[2004]: E1002 19:41:19.933736 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:41:19.933771 kubelet[2004]: I1002 19:41:19.933744 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:41:20.474159 kubelet[2004]: E1002 19:41:20.474116 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:41:24.124426 systemd[1]: Started sshd@15-10.0.0.10:22-10.0.0.1:47786.service. Oct 2 19:41:24.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.10:22-10.0.0.1:47786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:24.125501 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:41:24.125536 kernel: audit: type=1130 audit(1696275684.123:1188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.10:22-10.0.0.1:47786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:24.154000 audit[2721]: USER_ACCT pid=2721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:24.155395 sshd[2721]: Accepted publickey for core from 10.0.0.1 port 47786 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:41:24.157898 sshd[2721]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:24.156000 audit[2721]: CRED_ACQ pid=2721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:24.160728 kernel: audit: type=1101 audit(1696275684.154:1189): pid=2721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:24.160765 kernel: audit: type=1103 audit(1696275684.156:1190): pid=2721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:24.160788 kernel: audit: type=1006 audit(1696275684.156:1191): pid=2721 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:41:24.161082 systemd-logind[1087]: New session 16 of user core. Oct 2 19:41:24.162096 systemd[1]: Started session-16.scope. Oct 2 19:41:24.156000 audit[2721]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7d431620 a2=3 a3=0 items=0 ppid=1 pid=2721 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:24.166007 kernel: audit: type=1300 audit(1696275684.156:1191): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7d431620 a2=3 a3=0 items=0 ppid=1 pid=2721 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:24.166059 kernel: audit: type=1327 audit(1696275684.156:1191): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:24.156000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:24.164000 audit[2721]: USER_START pid=2721 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:24.169852 kernel: audit: type=1105 audit(1696275684.164:1192): pid=2721 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:24.169887 kernel: audit: type=1103 audit(1696275684.165:1193): pid=2723 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:24.165000 audit[2723]: CRED_ACQ pid=2723 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:24.257240 sshd[2721]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:24.256000 audit[2721]: USER_END pid=2721 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:24.259303 systemd[1]: sshd@15-10.0.0.10:22-10.0.0.1:47786.service: Deactivated successfully. Oct 2 19:41:24.259886 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:41:24.260308 systemd-logind[1087]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:41:24.260944 systemd-logind[1087]: Removed session 16. Oct 2 19:41:24.257000 audit[2721]: CRED_DISP pid=2721 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:24.263665 kernel: audit: type=1106 audit(1696275684.256:1194): pid=2721 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:24.263721 kernel: audit: type=1104 audit(1696275684.257:1195): pid=2721 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:24.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.10:22-10.0.0.1:47786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:24.525450 kubelet[2004]: E1002 19:41:24.525424 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:29.527015 kubelet[2004]: E1002 19:41:29.526944 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:29.944609 kubelet[2004]: I1002 19:41:29.944582 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:41:29.944609 kubelet[2004]: I1002 19:41:29.944614 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:41:29.945686 kubelet[2004]: I1002 19:41:29.945669 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:41:29.957244 kubelet[2004]: I1002 19:41:29.957216 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:41:29.957387 kubelet[2004]: I1002 19:41:29.957316 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:41:29.957387 kubelet[2004]: E1002 19:41:29.957347 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:41:29.957387 kubelet[2004]: E1002 19:41:29.957361 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:41:29.957387 kubelet[2004]: E1002 19:41:29.957373 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:41:29.957387 kubelet[2004]: E1002 19:41:29.957384 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:41:29.957559 kubelet[2004]: E1002 19:41:29.957396 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:41:29.957559 kubelet[2004]: E1002 19:41:29.957408 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:41:29.957559 kubelet[2004]: I1002 19:41:29.957420 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:41:32.474394 kubelet[2004]: E1002 19:41:32.474350 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:41:32.476543 env[1098]: time="2023-10-02T19:41:32.476377603Z" level=info msg="CreateContainer within sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:41:32.488118 env[1098]: time="2023-10-02T19:41:32.488071718Z" level=info msg="CreateContainer within sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f\"" Oct 2 19:41:32.488640 env[1098]: time="2023-10-02T19:41:32.488594331Z" level=info msg="StartContainer for \"04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f\"" Oct 2 19:41:32.506477 systemd[1]: Started cri-containerd-04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f.scope. Oct 2 19:41:32.513554 systemd[1]: cri-containerd-04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f.scope: Deactivated successfully. Oct 2 19:41:32.513787 systemd[1]: Stopped cri-containerd-04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f.scope. Oct 2 19:41:32.527953 env[1098]: time="2023-10-02T19:41:32.527900907Z" level=info msg="shim disconnected" id=04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f Oct 2 19:41:32.527953 env[1098]: time="2023-10-02T19:41:32.527947728Z" level=warning msg="cleaning up after shim disconnected" id=04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f namespace=k8s.io Oct 2 19:41:32.527953 env[1098]: time="2023-10-02T19:41:32.527955523Z" level=info msg="cleaning up dead shim" Oct 2 19:41:32.534738 env[1098]: time="2023-10-02T19:41:32.534695846Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:41:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2760 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:41:32Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:41:32.534977 env[1098]: time="2023-10-02T19:41:32.534918697Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:41:32.535152 env[1098]: time="2023-10-02T19:41:32.535094788Z" level=error msg="Failed to pipe stdout of container \"04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f\"" error="reading from a closed fifo" Oct 2 19:41:32.535308 env[1098]: time="2023-10-02T19:41:32.535271080Z" level=error msg="Failed to pipe stderr of container \"04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f\"" error="reading from a closed fifo" Oct 2 19:41:32.537554 env[1098]: time="2023-10-02T19:41:32.537506859Z" level=error msg="StartContainer for \"04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:41:32.537763 kubelet[2004]: E1002 19:41:32.537735 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f" Oct 2 19:41:32.537869 kubelet[2004]: E1002 19:41:32.537851 2004 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:41:32.537869 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:41:32.537869 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:41:32.537869 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cl5hh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:41:32.537993 kubelet[2004]: E1002 19:41:32.537891 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:41:32.751235 kubelet[2004]: I1002 19:41:32.751138 2004 scope.go:115] "RemoveContainer" containerID="b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66" Oct 2 19:41:32.751523 kubelet[2004]: I1002 19:41:32.751498 2004 scope.go:115] "RemoveContainer" containerID="b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66" Oct 2 19:41:32.752754 env[1098]: time="2023-10-02T19:41:32.752715018Z" level=info msg="RemoveContainer for \"b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66\"" Oct 2 19:41:32.753068 env[1098]: time="2023-10-02T19:41:32.753020489Z" level=info msg="RemoveContainer for \"b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66\"" Oct 2 19:41:32.753191 env[1098]: time="2023-10-02T19:41:32.753148066Z" level=error msg="RemoveContainer for \"b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66\" failed" error="failed to set removing state for container \"b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66\": container is already in removing state" Oct 2 19:41:32.753313 kubelet[2004]: E1002 19:41:32.753294 2004 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66\": container is already in removing state" containerID="b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66" Oct 2 19:41:32.753374 kubelet[2004]: E1002 19:41:32.753332 2004 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66": container is already in removing state; Skipping pod "cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)" Oct 2 19:41:32.753418 kubelet[2004]: E1002 19:41:32.753398 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:41:32.753723 kubelet[2004]: E1002 19:41:32.753662 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:41:32.755761 env[1098]: time="2023-10-02T19:41:32.755736689Z" level=info msg="RemoveContainer for \"b13772365e72bfb687bec21fb902e0aea81b9dbf1ba711e26e90dd9d73046e66\" returns successfully" Oct 2 19:41:33.484292 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f-rootfs.mount: Deactivated successfully. Oct 2 19:41:34.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.10:22-10.0.0.1:49240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:34.262069 systemd[1]: Started sshd@16-10.0.0.10:22-10.0.0.1:49240.service. Oct 2 19:41:34.265378 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:34.265496 kernel: audit: type=1130 audit(1696275694.261:1197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.10:22-10.0.0.1:49240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:34.298000 audit[2773]: USER_ACCT pid=2773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.299337 sshd[2773]: Accepted publickey for core from 10.0.0.1 port 49240 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:41:34.301467 sshd[2773]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:34.300000 audit[2773]: CRED_ACQ pid=2773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.303982 kernel: audit: type=1101 audit(1696275694.298:1198): pid=2773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.304052 kernel: audit: type=1103 audit(1696275694.300:1199): pid=2773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.304079 kernel: audit: type=1006 audit(1696275694.300:1200): pid=2773 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:41:34.304978 systemd-logind[1087]: New session 17 of user core. Oct 2 19:41:34.305522 kernel: audit: type=1300 audit(1696275694.300:1200): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6bddeed0 a2=3 a3=0 items=0 ppid=1 pid=2773 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:34.300000 audit[2773]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6bddeed0 a2=3 a3=0 items=0 ppid=1 pid=2773 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:34.305672 systemd[1]: Started session-17.scope. Oct 2 19:41:34.300000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:34.308690 kernel: audit: type=1327 audit(1696275694.300:1200): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:34.307000 audit[2773]: USER_START pid=2773 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.309060 kernel: audit: type=1105 audit(1696275694.307:1201): pid=2773 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.307000 audit[2775]: CRED_ACQ pid=2775 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.314120 kernel: audit: type=1103 audit(1696275694.307:1202): pid=2775 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.416734 sshd[2773]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:34.416000 audit[2773]: USER_END pid=2773 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.420315 systemd[1]: Started sshd@17-10.0.0.10:22-10.0.0.1:49244.service. Oct 2 19:41:34.416000 audit[2773]: CRED_DISP pid=2773 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.420706 systemd[1]: sshd@16-10.0.0.10:22-10.0.0.1:49240.service: Deactivated successfully. Oct 2 19:41:34.421308 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:41:34.421984 systemd-logind[1087]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:41:34.422763 systemd-logind[1087]: Removed session 17. Oct 2 19:41:34.423016 kernel: audit: type=1106 audit(1696275694.416:1203): pid=2773 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.423084 kernel: audit: type=1104 audit(1696275694.416:1204): pid=2773 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.10:22-10.0.0.1:49244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:34.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.10:22-10.0.0.1:49240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:34.450000 audit[2786]: USER_ACCT pid=2786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.452107 sshd[2786]: Accepted publickey for core from 10.0.0.1 port 49244 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:41:34.451000 audit[2786]: CRED_ACQ pid=2786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.451000 audit[2786]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff0f9e840 a2=3 a3=0 items=0 ppid=1 pid=2786 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:34.451000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:34.452902 sshd[2786]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:34.455706 systemd-logind[1087]: New session 18 of user core. Oct 2 19:41:34.456454 systemd[1]: Started session-18.scope. Oct 2 19:41:34.458000 audit[2786]: USER_START pid=2786 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.459000 audit[2789]: CRED_ACQ pid=2789 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:34.527629 kubelet[2004]: E1002 19:41:34.527530 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:35.319945 sshd[2786]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:35.323053 systemd[1]: Started sshd@18-10.0.0.10:22-10.0.0.1:49256.service. Oct 2 19:41:35.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.10:22-10.0.0.1:49256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:35.324000 audit[2786]: USER_END pid=2786 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:35.324000 audit[2786]: CRED_DISP pid=2786 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:35.328024 systemd[1]: sshd@17-10.0.0.10:22-10.0.0.1:49244.service: Deactivated successfully. Oct 2 19:41:35.327000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.10:22-10.0.0.1:49244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:35.328541 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:41:35.329007 systemd-logind[1087]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:41:35.329577 systemd-logind[1087]: Removed session 18. Oct 2 19:41:35.357000 audit[2797]: USER_ACCT pid=2797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:35.358442 sshd[2797]: Accepted publickey for core from 10.0.0.1 port 49256 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:41:35.358000 audit[2797]: CRED_ACQ pid=2797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:35.358000 audit[2797]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc40eb7d10 a2=3 a3=0 items=0 ppid=1 pid=2797 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:35.358000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:35.359334 sshd[2797]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:35.362687 systemd-logind[1087]: New session 19 of user core. Oct 2 19:41:35.363406 systemd[1]: Started session-19.scope. Oct 2 19:41:35.368000 audit[2797]: USER_START pid=2797 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:35.370000 audit[2800]: CRED_ACQ pid=2800 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:35.605936 sshd[2797]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:35.605000 audit[2797]: USER_END pid=2797 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:35.605000 audit[2797]: CRED_DISP pid=2797 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:35.608172 systemd[1]: sshd@18-10.0.0.10:22-10.0.0.1:49256.service: Deactivated successfully. Oct 2 19:41:35.608825 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:41:35.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.10:22-10.0.0.1:49256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:35.609399 systemd-logind[1087]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:41:35.610096 systemd-logind[1087]: Removed session 19. Oct 2 19:41:35.633599 kubelet[2004]: W1002 19:41:35.633551 2004 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod09d97a73_9473_483a_a374_8fd76b1aee59.slice/cri-containerd-04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f.scope WatchSource:0}: task 04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f not found: not found Oct 2 19:41:38.474241 kubelet[2004]: E1002 19:41:38.474207 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:41:39.528858 kubelet[2004]: E1002 19:41:39.528817 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:39.968697 kubelet[2004]: I1002 19:41:39.968667 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:41:39.968697 kubelet[2004]: I1002 19:41:39.968699 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:41:39.969813 kubelet[2004]: I1002 19:41:39.969796 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:41:39.978561 kubelet[2004]: I1002 19:41:39.978540 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:41:39.978615 kubelet[2004]: I1002 19:41:39.978608 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:41:39.978655 kubelet[2004]: E1002 19:41:39.978628 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:41:39.978655 kubelet[2004]: E1002 19:41:39.978641 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:41:39.978655 kubelet[2004]: E1002 19:41:39.978649 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:41:39.978722 kubelet[2004]: E1002 19:41:39.978657 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:41:39.978722 kubelet[2004]: E1002 19:41:39.978665 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:41:39.978722 kubelet[2004]: E1002 19:41:39.978673 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:41:39.978722 kubelet[2004]: I1002 19:41:39.978681 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:41:44.529807 kubelet[2004]: E1002 19:41:44.529780 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:45.611080 systemd[1]: Started sshd@19-10.0.0.10:22-10.0.0.1:35356.service. Oct 2 19:41:45.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.10:22-10.0.0.1:35356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:45.614102 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:41:45.614164 kernel: audit: type=1130 audit(1696275705.610:1224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.10:22-10.0.0.1:35356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:45.640000 audit[2811]: USER_ACCT pid=2811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:45.641734 sshd[2811]: Accepted publickey for core from 10.0.0.1 port 35356 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:41:45.643000 audit[2811]: CRED_ACQ pid=2811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:45.644592 sshd[2811]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:45.646671 kernel: audit: type=1101 audit(1696275705.640:1225): pid=2811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:45.646768 kernel: audit: type=1103 audit(1696275705.643:1226): pid=2811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:45.646792 kernel: audit: type=1006 audit(1696275705.643:1227): pid=2811 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:41:45.647589 systemd-logind[1087]: New session 20 of user core. Oct 2 19:41:45.643000 audit[2811]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe36dbc030 a2=3 a3=0 items=0 ppid=1 pid=2811 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:45.648371 systemd[1]: Started session-20.scope. Oct 2 19:41:45.650770 kernel: audit: type=1300 audit(1696275705.643:1227): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe36dbc030 a2=3 a3=0 items=0 ppid=1 pid=2811 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:45.650811 kernel: audit: type=1327 audit(1696275705.643:1227): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:45.643000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:45.651000 audit[2811]: USER_START pid=2811 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:45.652000 audit[2813]: CRED_ACQ pid=2813 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:45.657522 kernel: audit: type=1105 audit(1696275705.651:1228): pid=2811 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:45.657565 kernel: audit: type=1103 audit(1696275705.652:1229): pid=2813 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:45.752801 sshd[2811]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:45.752000 audit[2811]: USER_END pid=2811 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:45.755238 systemd[1]: sshd@19-10.0.0.10:22-10.0.0.1:35356.service: Deactivated successfully. Oct 2 19:41:45.755908 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:41:45.756430 systemd-logind[1087]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:41:45.752000 audit[2811]: CRED_DISP pid=2811 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:45.757415 systemd-logind[1087]: Removed session 20. Oct 2 19:41:45.758797 kernel: audit: type=1106 audit(1696275705.752:1230): pid=2811 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:45.758838 kernel: audit: type=1104 audit(1696275705.752:1231): pid=2811 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:45.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.10:22-10.0.0.1:35356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:46.473446 kubelet[2004]: E1002 19:41:46.473418 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:41:46.473949 kubelet[2004]: E1002 19:41:46.473924 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:41:49.530599 kubelet[2004]: E1002 19:41:49.530567 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:49.994058 kubelet[2004]: I1002 19:41:49.993995 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:41:49.994058 kubelet[2004]: I1002 19:41:49.994060 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:41:49.995234 kubelet[2004]: I1002 19:41:49.995211 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:41:50.005207 kubelet[2004]: I1002 19:41:50.005177 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:41:50.005371 kubelet[2004]: I1002 19:41:50.005247 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:41:50.005371 kubelet[2004]: E1002 19:41:50.005270 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:41:50.005371 kubelet[2004]: E1002 19:41:50.005281 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:41:50.005371 kubelet[2004]: E1002 19:41:50.005290 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:41:50.005371 kubelet[2004]: E1002 19:41:50.005298 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:41:50.005371 kubelet[2004]: E1002 19:41:50.005306 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:41:50.005371 kubelet[2004]: E1002 19:41:50.005314 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:41:50.005371 kubelet[2004]: I1002 19:41:50.005323 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:41:54.531240 kubelet[2004]: E1002 19:41:54.531204 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:55.758556 systemd[1]: Started sshd@20-10.0.0.10:22-10.0.0.1:39058.service. Oct 2 19:41:55.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.10:22-10.0.0.1:39058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:55.759859 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:55.759915 kernel: audit: type=1130 audit(1696275715.757:1233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.10:22-10.0.0.1:39058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:55.810000 audit[2824]: USER_ACCT pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:55.815088 sshd[2824]: Accepted publickey for core from 10.0.0.1 port 39058 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:41:55.816000 audit[2824]: CRED_ACQ pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:55.817536 sshd[2824]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:55.828018 kernel: audit: type=1101 audit(1696275715.810:1234): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:55.828135 kernel: audit: type=1103 audit(1696275715.816:1235): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:55.828161 kernel: audit: type=1006 audit(1696275715.816:1236): pid=2824 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:41:55.827625 systemd-logind[1087]: New session 21 of user core. Oct 2 19:41:55.829448 systemd[1]: Started session-21.scope. Oct 2 19:41:55.838658 kernel: audit: type=1300 audit(1696275715.816:1236): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc86eff370 a2=3 a3=0 items=0 ppid=1 pid=2824 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:55.816000 audit[2824]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc86eff370 a2=3 a3=0 items=0 ppid=1 pid=2824 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:55.855155 kernel: audit: type=1327 audit(1696275715.816:1236): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:55.855324 kernel: audit: type=1105 audit(1696275715.846:1237): pid=2824 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:55.816000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:55.846000 audit[2824]: USER_START pid=2824 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:55.848000 audit[2826]: CRED_ACQ pid=2826 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:55.878869 kernel: audit: type=1103 audit(1696275715.848:1238): pid=2826 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:56.064595 sshd[2824]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:56.064000 audit[2824]: USER_END pid=2824 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:56.068613 systemd[1]: sshd@20-10.0.0.10:22-10.0.0.1:39058.service: Deactivated successfully. Oct 2 19:41:56.069504 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:41:56.079240 kernel: audit: type=1106 audit(1696275716.064:1239): pid=2824 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:56.079328 kernel: audit: type=1104 audit(1696275716.064:1240): pid=2824 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:56.064000 audit[2824]: CRED_DISP pid=2824 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:41:56.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.10:22-10.0.0.1:39058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:56.080895 systemd-logind[1087]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:41:56.082117 systemd-logind[1087]: Removed session 21. Oct 2 19:41:56.475363 kubelet[2004]: E1002 19:41:56.474964 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:41:58.477755 kubelet[2004]: E1002 19:41:58.473589 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:41:58.477755 kubelet[2004]: E1002 19:41:58.477632 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:41:59.535866 kubelet[2004]: E1002 19:41:59.534974 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:00.027132 kubelet[2004]: I1002 19:42:00.026442 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:42:00.027132 kubelet[2004]: I1002 19:42:00.026484 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:42:00.030441 kubelet[2004]: I1002 19:42:00.030284 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:42:00.066880 kubelet[2004]: I1002 19:42:00.059160 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:42:00.066880 kubelet[2004]: I1002 19:42:00.059274 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:42:00.066880 kubelet[2004]: E1002 19:42:00.059304 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:42:00.066880 kubelet[2004]: E1002 19:42:00.059322 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:00.066880 kubelet[2004]: E1002 19:42:00.059336 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:00.066880 kubelet[2004]: E1002 19:42:00.059350 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:42:00.066880 kubelet[2004]: E1002 19:42:00.059363 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:42:00.066880 kubelet[2004]: E1002 19:42:00.059374 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:42:00.066880 kubelet[2004]: I1002 19:42:00.059387 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:42:04.539216 kubelet[2004]: E1002 19:42:04.539181 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:06.082376 systemd[1]: Started sshd@21-10.0.0.10:22-10.0.0.1:44206.service. Oct 2 19:42:06.083516 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:06.083656 kernel: audit: type=1130 audit(1696275726.080:1242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.10:22-10.0.0.1:44206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.10:22-10.0.0.1:44206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.138000 audit[2840]: USER_ACCT pid=2840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.139988 sshd[2840]: Accepted publickey for core from 10.0.0.1 port 44206 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:42:06.145000 audit[2840]: CRED_ACQ pid=2840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.147732 sshd[2840]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:06.156239 kernel: audit: type=1101 audit(1696275726.138:1243): pid=2840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.156382 kernel: audit: type=1103 audit(1696275726.145:1244): pid=2840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.156421 kernel: audit: type=1006 audit(1696275726.145:1245): pid=2840 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:42:06.161354 systemd[1]: Started session-22.scope. Oct 2 19:42:06.162354 systemd-logind[1087]: New session 22 of user core. Oct 2 19:42:06.145000 audit[2840]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdecbec110 a2=3 a3=0 items=0 ppid=1 pid=2840 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:06.167259 kernel: audit: type=1300 audit(1696275726.145:1245): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdecbec110 a2=3 a3=0 items=0 ppid=1 pid=2840 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:06.167396 kernel: audit: type=1327 audit(1696275726.145:1245): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:06.145000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:06.186000 audit[2840]: USER_START pid=2840 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.187000 audit[2842]: CRED_ACQ pid=2842 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.199361 kernel: audit: type=1105 audit(1696275726.186:1246): pid=2840 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.199499 kernel: audit: type=1103 audit(1696275726.187:1247): pid=2842 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.399152 sshd[2840]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:06.399000 audit[2840]: USER_END pid=2840 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.399000 audit[2840]: CRED_DISP pid=2840 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.406479 systemd[1]: sshd@21-10.0.0.10:22-10.0.0.1:44206.service: Deactivated successfully. Oct 2 19:42:06.407420 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:42:06.409936 kernel: audit: type=1106 audit(1696275726.399:1248): pid=2840 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.410002 kernel: audit: type=1104 audit(1696275726.399:1249): pid=2840 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.10:22-10.0.0.1:44206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.414022 systemd-logind[1087]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:42:06.415857 systemd-logind[1087]: Removed session 22. Oct 2 19:42:06.478164 kubelet[2004]: E1002 19:42:06.475328 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:09.581796 kubelet[2004]: E1002 19:42:09.581759 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:10.085608 kubelet[2004]: I1002 19:42:10.078255 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:42:10.085608 kubelet[2004]: I1002 19:42:10.078293 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:42:10.085608 kubelet[2004]: I1002 19:42:10.079930 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:42:10.096531 kubelet[2004]: I1002 19:42:10.096071 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:42:10.096531 kubelet[2004]: I1002 19:42:10.096214 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:42:10.096531 kubelet[2004]: E1002 19:42:10.096247 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:42:10.096531 kubelet[2004]: E1002 19:42:10.096264 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:10.096531 kubelet[2004]: E1002 19:42:10.096278 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:10.096531 kubelet[2004]: E1002 19:42:10.096293 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:42:10.096531 kubelet[2004]: E1002 19:42:10.096306 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:42:10.096531 kubelet[2004]: E1002 19:42:10.096319 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:42:10.096531 kubelet[2004]: I1002 19:42:10.096333 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:42:10.111000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:10.111000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026db760 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:42:10.111000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:10.111000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:10.111000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002aaedb0 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:42:10.111000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:10.976000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:10.976000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c01073f3b0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:42:10.976000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:42:10.976000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:10.976000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c010896750 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:42:10.976000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:42:10.976000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:10.976000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c01080e580 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:42:10.976000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:42:10.976000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:10.976000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c010705ef0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:42:10.976000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:42:10.983000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:10.983000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c010896870 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:42:10.983000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:42:10.983000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:10.983000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c01080e5c0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:42:10.983000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:42:11.478408 kubelet[2004]: E1002 19:42:11.475304 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:13.473803 kubelet[2004]: E1002 19:42:13.473228 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:13.473803 kubelet[2004]: E1002 19:42:13.473503 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:42:14.605642 kubelet[2004]: E1002 19:42:14.605582 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:15.891116 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:42:15.891353 kernel: audit: type=1400 audit(1696275735.888:1259): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:15.888000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:15.888000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002817b40 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:42:15.905296 kernel: audit: type=1300 audit(1696275735.888:1259): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002817b40 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:42:15.906246 kernel: audit: type=1327 audit(1696275735.888:1259): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:15.888000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:15.890000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:15.890000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002817c60 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:42:15.924483 kernel: audit: type=1400 audit(1696275735.890:1260): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:15.924643 kernel: audit: type=1300 audit(1696275735.890:1260): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002817c60 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:42:15.924677 kernel: audit: type=1327 audit(1696275735.890:1260): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:15.890000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:15.928466 kernel: audit: type=1400 audit(1696275735.891:1261): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:15.891000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:15.932468 kernel: audit: type=1300 audit(1696275735.891:1261): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002817c80 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:42:15.891000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002817c80 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:42:15.935941 kernel: audit: type=1327 audit(1696275735.891:1261): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:15.891000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:15.940500 kernel: audit: type=1400 audit(1696275735.891:1262): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:15.891000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:15.891000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002817ca0 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:42:15.891000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:16.404635 systemd[1]: Started sshd@22-10.0.0.10:22-10.0.0.1:42924.service. Oct 2 19:42:16.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.10:22-10.0.0.1:42924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:16.476080 sshd[2855]: Accepted publickey for core from 10.0.0.1 port 42924 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:42:16.474000 audit[2855]: USER_ACCT pid=2855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:16.477000 audit[2855]: CRED_ACQ pid=2855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:16.477000 audit[2855]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffead4b0020 a2=3 a3=0 items=0 ppid=1 pid=2855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:16.477000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:16.478620 sshd[2855]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:16.514650 systemd-logind[1087]: New session 23 of user core. Oct 2 19:42:16.515567 systemd[1]: Started session-23.scope. Oct 2 19:42:16.600000 audit[2855]: USER_START pid=2855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:16.610000 audit[2857]: CRED_ACQ pid=2857 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:16.824298 sshd[2855]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:16.829000 audit[2855]: USER_END pid=2855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:16.829000 audit[2855]: CRED_DISP pid=2855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:16.832505 systemd[1]: sshd@22-10.0.0.10:22-10.0.0.1:42924.service: Deactivated successfully. Oct 2 19:42:16.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.10:22-10.0.0.1:42924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:16.833622 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:42:16.835767 systemd-logind[1087]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:42:16.837276 systemd-logind[1087]: Removed session 23. Oct 2 19:42:19.606820 kubelet[2004]: E1002 19:42:19.606788 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:20.140077 kubelet[2004]: I1002 19:42:20.138535 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:42:20.140077 kubelet[2004]: I1002 19:42:20.138578 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:42:20.148406 kubelet[2004]: I1002 19:42:20.144957 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:42:20.173204 kubelet[2004]: I1002 19:42:20.170328 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:42:20.173204 kubelet[2004]: I1002 19:42:20.170428 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:42:20.173204 kubelet[2004]: E1002 19:42:20.170463 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:42:20.173204 kubelet[2004]: E1002 19:42:20.170481 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:20.173204 kubelet[2004]: E1002 19:42:20.170497 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:20.173204 kubelet[2004]: E1002 19:42:20.170510 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:42:20.173204 kubelet[2004]: E1002 19:42:20.170525 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:42:20.173204 kubelet[2004]: E1002 19:42:20.170537 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:42:20.173204 kubelet[2004]: I1002 19:42:20.170549 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:42:24.612887 kubelet[2004]: E1002 19:42:24.611387 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:26.474686 kubelet[2004]: E1002 19:42:26.474632 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:26.475129 kubelet[2004]: E1002 19:42:26.474910 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:42:26.835837 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:42:26.835988 kernel: audit: type=1130 audit(1696275746.830:1272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.10:22-10.0.0.1:35706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:26.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.10:22-10.0.0.1:35706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:26.831527 systemd[1]: Started sshd@23-10.0.0.10:22-10.0.0.1:35706.service. Oct 2 19:42:27.025000 audit[2872]: USER_ACCT pid=2872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:27.028804 sshd[2872]: Accepted publickey for core from 10.0.0.1 port 35706 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:42:27.031218 sshd[2872]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:27.037748 kernel: audit: type=1101 audit(1696275747.025:1273): pid=2872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:27.037906 kernel: audit: type=1103 audit(1696275747.028:1274): pid=2872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:27.037953 kernel: audit: type=1006 audit(1696275747.028:1275): pid=2872 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:42:27.028000 audit[2872]: CRED_ACQ pid=2872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:27.041729 kernel: audit: type=1300 audit(1696275747.028:1275): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffedb23530 a2=3 a3=0 items=0 ppid=1 pid=2872 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:27.028000 audit[2872]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffedb23530 a2=3 a3=0 items=0 ppid=1 pid=2872 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:27.028000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:27.047047 kernel: audit: type=1327 audit(1696275747.028:1275): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:27.065655 systemd[1]: Started session-24.scope. Oct 2 19:42:27.065715 systemd-logind[1087]: New session 24 of user core. Oct 2 19:42:27.246000 audit[2872]: USER_START pid=2872 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:27.257068 kernel: audit: type=1105 audit(1696275747.246:1276): pid=2872 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:27.256000 audit[2874]: CRED_ACQ pid=2874 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:27.264950 kernel: audit: type=1103 audit(1696275747.256:1277): pid=2874 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:27.561910 sshd[2872]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:27.585000 audit[2872]: USER_END pid=2872 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:27.589716 systemd[1]: sshd@23-10.0.0.10:22-10.0.0.1:35706.service: Deactivated successfully. Oct 2 19:42:27.585000 audit[2872]: CRED_DISP pid=2872 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:27.590691 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:42:27.597243 kernel: audit: type=1106 audit(1696275747.585:1278): pid=2872 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:27.597316 kernel: audit: type=1104 audit(1696275747.585:1279): pid=2872 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:27.589000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.10:22-10.0.0.1:35706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:27.597477 systemd-logind[1087]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:42:27.606529 systemd-logind[1087]: Removed session 24. Oct 2 19:42:29.614298 kubelet[2004]: E1002 19:42:29.614097 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:30.210595 kubelet[2004]: I1002 19:42:30.208404 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:42:30.210595 kubelet[2004]: I1002 19:42:30.208487 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:42:30.229194 kubelet[2004]: I1002 19:42:30.229163 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:42:30.247060 kubelet[2004]: I1002 19:42:30.246445 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:42:30.247060 kubelet[2004]: I1002 19:42:30.246563 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:42:30.247060 kubelet[2004]: E1002 19:42:30.246592 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:42:30.247060 kubelet[2004]: E1002 19:42:30.246605 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:30.247060 kubelet[2004]: E1002 19:42:30.246616 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:30.247060 kubelet[2004]: E1002 19:42:30.246627 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:42:30.247060 kubelet[2004]: E1002 19:42:30.246638 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:42:30.247060 kubelet[2004]: E1002 19:42:30.246649 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:42:30.247060 kubelet[2004]: I1002 19:42:30.246661 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:42:30.474376 kubelet[2004]: E1002 19:42:30.474268 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:34.617243 kubelet[2004]: E1002 19:42:34.617162 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:37.561776 systemd[1]: Started sshd@24-10.0.0.10:22-10.0.0.1:49558.service. Oct 2 19:42:37.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.10:22-10.0.0.1:49558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:37.562601 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:37.562679 kernel: audit: type=1130 audit(1696275757.560:1281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.10:22-10.0.0.1:49558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:37.599000 audit[2887]: USER_ACCT pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:37.600863 sshd[2887]: Accepted publickey for core from 10.0.0.1 port 49558 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:42:37.603000 audit[2887]: CRED_ACQ pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:37.604699 sshd[2887]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:37.607528 kernel: audit: type=1101 audit(1696275757.599:1282): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:37.607671 kernel: audit: type=1103 audit(1696275757.603:1283): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:37.609737 kernel: audit: type=1006 audit(1696275757.603:1284): pid=2887 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:42:37.603000 audit[2887]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb48ec7e0 a2=3 a3=0 items=0 ppid=1 pid=2887 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:37.610506 systemd-logind[1087]: New session 25 of user core. Oct 2 19:42:37.611183 systemd[1]: Started session-25.scope. Oct 2 19:42:37.613300 kernel: audit: type=1300 audit(1696275757.603:1284): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb48ec7e0 a2=3 a3=0 items=0 ppid=1 pid=2887 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:37.613382 kernel: audit: type=1327 audit(1696275757.603:1284): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:37.603000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:37.616000 audit[2887]: USER_START pid=2887 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:37.618000 audit[2889]: CRED_ACQ pid=2889 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:37.624513 kernel: audit: type=1105 audit(1696275757.616:1285): pid=2887 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:37.624619 kernel: audit: type=1103 audit(1696275757.618:1286): pid=2889 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:37.737980 sshd[2887]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:37.738000 audit[2887]: USER_END pid=2887 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:37.740234 systemd[1]: sshd@24-10.0.0.10:22-10.0.0.1:49558.service: Deactivated successfully. Oct 2 19:42:37.741173 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:42:37.741951 systemd-logind[1087]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:42:37.738000 audit[2887]: CRED_DISP pid=2887 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:37.742843 systemd-logind[1087]: Removed session 25. Oct 2 19:42:37.745657 kernel: audit: type=1106 audit(1696275757.738:1287): pid=2887 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:37.745716 kernel: audit: type=1104 audit(1696275757.738:1288): pid=2887 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:37.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.10:22-10.0.0.1:49558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:39.473547 kubelet[2004]: E1002 19:42:39.473516 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:39.473909 kubelet[2004]: E1002 19:42:39.473723 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:42:39.617800 kubelet[2004]: E1002 19:42:39.617770 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:40.257825 kubelet[2004]: I1002 19:42:40.257785 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:42:40.257825 kubelet[2004]: I1002 19:42:40.257818 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:42:40.259127 kubelet[2004]: I1002 19:42:40.259111 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:42:40.266670 kubelet[2004]: I1002 19:42:40.266648 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:42:40.266790 kubelet[2004]: I1002 19:42:40.266724 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:42:40.266790 kubelet[2004]: E1002 19:42:40.266746 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:42:40.266790 kubelet[2004]: E1002 19:42:40.266757 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:40.266790 kubelet[2004]: E1002 19:42:40.266767 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:40.266790 kubelet[2004]: E1002 19:42:40.266776 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:42:40.266790 kubelet[2004]: E1002 19:42:40.266784 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:42:40.266790 kubelet[2004]: E1002 19:42:40.266792 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:42:40.267063 kubelet[2004]: I1002 19:42:40.266801 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:42:44.618243 kubelet[2004]: E1002 19:42:44.618184 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:46.474121 kubelet[2004]: E1002 19:42:46.474079 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:47.741059 systemd[1]: Started sshd@25-10.0.0.10:22-10.0.0.1:36996.service. Oct 2 19:42:47.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.10:22-10.0.0.1:36996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:47.742178 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:47.742229 kernel: audit: type=1130 audit(1696275767.740:1290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.10:22-10.0.0.1:36996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:47.772000 audit[2900]: USER_ACCT pid=2900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:47.774015 sshd[2900]: Accepted publickey for core from 10.0.0.1 port 36996 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:42:47.775371 sshd[2900]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:47.774000 audit[2900]: CRED_ACQ pid=2900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:47.778680 kernel: audit: type=1101 audit(1696275767.772:1291): pid=2900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:47.778740 kernel: audit: type=1103 audit(1696275767.774:1292): pid=2900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:47.778778 kernel: audit: type=1006 audit(1696275767.774:1293): pid=2900 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:42:47.778401 systemd-logind[1087]: New session 26 of user core. Oct 2 19:42:47.779396 systemd[1]: Started session-26.scope. Oct 2 19:42:47.774000 audit[2900]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbeca9a00 a2=3 a3=0 items=0 ppid=1 pid=2900 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:47.782400 kernel: audit: type=1300 audit(1696275767.774:1293): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbeca9a00 a2=3 a3=0 items=0 ppid=1 pid=2900 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:47.782442 kernel: audit: type=1327 audit(1696275767.774:1293): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:47.774000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:47.782000 audit[2900]: USER_START pid=2900 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:47.786243 kernel: audit: type=1105 audit(1696275767.782:1294): pid=2900 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:47.786287 kernel: audit: type=1103 audit(1696275767.783:1295): pid=2902 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:47.783000 audit[2902]: CRED_ACQ pid=2902 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:47.875549 sshd[2900]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:47.875000 audit[2900]: USER_END pid=2900 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:47.877423 systemd[1]: sshd@25-10.0.0.10:22-10.0.0.1:36996.service: Deactivated successfully. Oct 2 19:42:47.878166 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:42:47.879044 systemd-logind[1087]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:42:47.875000 audit[2900]: CRED_DISP pid=2900 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:47.879751 systemd-logind[1087]: Removed session 26. Oct 2 19:42:47.881636 kernel: audit: type=1106 audit(1696275767.875:1296): pid=2900 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:47.881692 kernel: audit: type=1104 audit(1696275767.875:1297): pid=2900 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:47.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.10:22-10.0.0.1:36996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:49.619555 kubelet[2004]: E1002 19:42:49.619529 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:50.278099 kubelet[2004]: I1002 19:42:50.278070 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:42:50.278099 kubelet[2004]: I1002 19:42:50.278101 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:42:50.279230 kubelet[2004]: I1002 19:42:50.279216 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:42:50.287657 kubelet[2004]: I1002 19:42:50.287624 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:42:50.287825 kubelet[2004]: I1002 19:42:50.287688 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:42:50.287825 kubelet[2004]: E1002 19:42:50.287707 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:42:50.287825 kubelet[2004]: E1002 19:42:50.287717 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:50.287825 kubelet[2004]: E1002 19:42:50.287725 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:50.287825 kubelet[2004]: E1002 19:42:50.287735 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:42:50.287825 kubelet[2004]: E1002 19:42:50.287744 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:42:50.287825 kubelet[2004]: E1002 19:42:50.287752 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:42:50.287825 kubelet[2004]: I1002 19:42:50.287760 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:42:51.473832 kubelet[2004]: E1002 19:42:51.473796 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:51.474205 kubelet[2004]: E1002 19:42:51.473982 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:42:54.620965 kubelet[2004]: E1002 19:42:54.620934 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:57.878969 systemd[1]: Started sshd@26-10.0.0.10:22-10.0.0.1:45656.service. Oct 2 19:42:57.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.10:22-10.0.0.1:45656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:57.882026 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:57.882090 kernel: audit: type=1130 audit(1696275777.878:1299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.10:22-10.0.0.1:45656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:57.911000 audit[2913]: USER_ACCT pid=2913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:57.912440 sshd[2913]: Accepted publickey for core from 10.0.0.1 port 45656 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:42:57.914524 sshd[2913]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:57.913000 audit[2913]: CRED_ACQ pid=2913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:57.917012 kernel: audit: type=1101 audit(1696275777.911:1300): pid=2913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:57.917118 kernel: audit: type=1103 audit(1696275777.913:1301): pid=2913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:57.917141 kernel: audit: type=1006 audit(1696275777.913:1302): pid=2913 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:42:57.917722 systemd-logind[1087]: New session 27 of user core. Oct 2 19:42:57.918433 kernel: audit: type=1300 audit(1696275777.913:1302): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb33f75e0 a2=3 a3=0 items=0 ppid=1 pid=2913 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:57.913000 audit[2913]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb33f75e0 a2=3 a3=0 items=0 ppid=1 pid=2913 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:57.918453 systemd[1]: Started session-27.scope. Oct 2 19:42:57.913000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:57.921880 kernel: audit: type=1327 audit(1696275777.913:1302): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:57.921000 audit[2913]: USER_START pid=2913 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:57.922000 audit[2915]: CRED_ACQ pid=2915 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:57.927604 kernel: audit: type=1105 audit(1696275777.921:1303): pid=2913 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:57.927631 kernel: audit: type=1103 audit(1696275777.922:1304): pid=2915 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:58.030284 sshd[2913]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:58.030000 audit[2913]: USER_END pid=2913 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:58.032904 systemd[1]: sshd@26-10.0.0.10:22-10.0.0.1:45656.service: Deactivated successfully. Oct 2 19:42:58.033580 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:42:58.034117 systemd-logind[1087]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:42:58.030000 audit[2913]: CRED_DISP pid=2913 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:58.035072 systemd-logind[1087]: Removed session 27. Oct 2 19:42:58.037175 kernel: audit: type=1106 audit(1696275778.030:1305): pid=2913 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:58.037237 kernel: audit: type=1104 audit(1696275778.030:1306): pid=2913 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:58.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.10:22-10.0.0.1:45656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:59.473567 kubelet[2004]: E1002 19:42:59.473495 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:59.622358 kubelet[2004]: E1002 19:42:59.622323 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:00.298652 kubelet[2004]: I1002 19:43:00.298619 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:43:00.298652 kubelet[2004]: I1002 19:43:00.298652 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:43:00.299576 kubelet[2004]: I1002 19:43:00.299561 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:43:00.307778 kubelet[2004]: I1002 19:43:00.307753 2004 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:43:00.307839 kubelet[2004]: I1002 19:43:00.307827 2004 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hlrzn kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-l4g2g kube-system/kube-proxy-98wgm]" Oct 2 19:43:00.307867 kubelet[2004]: E1002 19:43:00.307850 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hlrzn" Oct 2 19:43:00.307867 kubelet[2004]: E1002 19:43:00.307864 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:43:00.307911 kubelet[2004]: E1002 19:43:00.307873 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:43:00.307911 kubelet[2004]: E1002 19:43:00.307882 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:43:00.307911 kubelet[2004]: E1002 19:43:00.307891 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-l4g2g" Oct 2 19:43:00.307911 kubelet[2004]: E1002 19:43:00.307898 2004 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-98wgm" Oct 2 19:43:00.307911 kubelet[2004]: I1002 19:43:00.307907 2004 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:43:03.474230 kubelet[2004]: E1002 19:43:03.474187 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:03.475902 env[1098]: time="2023-10-02T19:43:03.475856688Z" level=info msg="CreateContainer within sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:43:03.485921 env[1098]: time="2023-10-02T19:43:03.485879577Z" level=info msg="CreateContainer within sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6\"" Oct 2 19:43:03.486229 env[1098]: time="2023-10-02T19:43:03.486205331Z" level=info msg="StartContainer for \"b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6\"" Oct 2 19:43:03.499989 systemd[1]: run-containerd-runc-k8s.io-b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6-runc.FAU8wC.mount: Deactivated successfully. Oct 2 19:43:03.501048 systemd[1]: Started cri-containerd-b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6.scope. Oct 2 19:43:03.508294 systemd[1]: cri-containerd-b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6.scope: Deactivated successfully. Oct 2 19:43:03.508509 systemd[1]: Stopped cri-containerd-b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6.scope. Oct 2 19:43:03.517810 env[1098]: time="2023-10-02T19:43:03.517771285Z" level=info msg="shim disconnected" id=b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6 Oct 2 19:43:03.517963 env[1098]: time="2023-10-02T19:43:03.517942988Z" level=warning msg="cleaning up after shim disconnected" id=b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6 namespace=k8s.io Oct 2 19:43:03.517963 env[1098]: time="2023-10-02T19:43:03.517960641Z" level=info msg="cleaning up dead shim" Oct 2 19:43:03.523910 env[1098]: time="2023-10-02T19:43:03.523880135Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2952 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:03Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:03.524131 env[1098]: time="2023-10-02T19:43:03.524088748Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:43:03.524294 env[1098]: time="2023-10-02T19:43:03.524245443Z" level=error msg="Failed to pipe stdout of container \"b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6\"" error="reading from a closed fifo" Oct 2 19:43:03.525133 env[1098]: time="2023-10-02T19:43:03.525096966Z" level=error msg="Failed to pipe stderr of container \"b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6\"" error="reading from a closed fifo" Oct 2 19:43:03.527224 env[1098]: time="2023-10-02T19:43:03.527179987Z" level=error msg="StartContainer for \"b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:03.527397 kubelet[2004]: E1002 19:43:03.527363 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6" Oct 2 19:43:03.527501 kubelet[2004]: E1002 19:43:03.527485 2004 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:03.527501 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:03.527501 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:43:03.527501 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cl5hh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:03.527629 kubelet[2004]: E1002 19:43:03.527526 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:43:04.074343 kubelet[2004]: I1002 19:43:04.074314 2004 scope.go:115] "RemoveContainer" containerID="04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f" Oct 2 19:43:04.074605 kubelet[2004]: I1002 19:43:04.074581 2004 scope.go:115] "RemoveContainer" containerID="04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f" Oct 2 19:43:04.075971 env[1098]: time="2023-10-02T19:43:04.075936229Z" level=info msg="RemoveContainer for \"04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f\"" Oct 2 19:43:04.076738 env[1098]: time="2023-10-02T19:43:04.076251753Z" level=info msg="RemoveContainer for \"04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f\"" Oct 2 19:43:04.076738 env[1098]: time="2023-10-02T19:43:04.076341012Z" level=error msg="RemoveContainer for \"04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f\" failed" error="failed to set removing state for container \"04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f\": container is already in removing state" Oct 2 19:43:04.076814 kubelet[2004]: E1002 19:43:04.076470 2004 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f\": container is already in removing state" containerID="04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f" Oct 2 19:43:04.076814 kubelet[2004]: E1002 19:43:04.076495 2004 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f": container is already in removing state; Skipping pod "cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)" Oct 2 19:43:04.076814 kubelet[2004]: E1002 19:43:04.076550 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:04.076814 kubelet[2004]: E1002 19:43:04.076725 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hlrzn_kube-system(09d97a73-9473-483a-a374-8fd76b1aee59)\"" pod="kube-system/cilium-hlrzn" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 Oct 2 19:43:04.079315 env[1098]: time="2023-10-02T19:43:04.079288723Z" level=info msg="RemoveContainer for \"04e7a33f435795abcab0115c26e71b4486f8a733b016585b5089ebd326d8ec7f\" returns successfully" Oct 2 19:43:04.482836 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6-rootfs.mount: Deactivated successfully. Oct 2 19:43:04.623182 kubelet[2004]: E1002 19:43:04.623140 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:06.621142 kubelet[2004]: W1002 19:43:06.621089 2004 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod09d97a73_9473_483a_a374_8fd76b1aee59.slice/cri-containerd-b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6.scope WatchSource:0}: task b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6 not found: not found Oct 2 19:43:08.034022 systemd[1]: Started sshd@27-10.0.0.10:22-10.0.0.1:42782.service. Oct 2 19:43:08.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.10:22-10.0.0.1:42782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:08.037220 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:43:08.037293 kernel: audit: type=1130 audit(1696275788.033:1308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.10:22-10.0.0.1:42782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:08.066000 audit[2965]: USER_ACCT pid=2965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.067643 sshd[2965]: Accepted publickey for core from 10.0.0.1 port 42782 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:43:08.070065 kernel: audit: type=1101 audit(1696275788.066:1309): pid=2965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.069000 audit[2965]: CRED_ACQ pid=2965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.070506 sshd[2965]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:43:08.073470 systemd-logind[1087]: New session 28 of user core. Oct 2 19:43:08.073977 kernel: audit: type=1103 audit(1696275788.069:1310): pid=2965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.074020 kernel: audit: type=1006 audit(1696275788.069:1311): pid=2965 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:43:08.074050 kernel: audit: type=1300 audit(1696275788.069:1311): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd81ce780 a2=3 a3=0 items=0 ppid=1 pid=2965 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:08.069000 audit[2965]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd81ce780 a2=3 a3=0 items=0 ppid=1 pid=2965 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:08.074188 systemd[1]: Started session-28.scope. Oct 2 19:43:08.069000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:43:08.077330 kernel: audit: type=1327 audit(1696275788.069:1311): proctitle=737368643A20636F7265205B707269765D Oct 2 19:43:08.083084 kernel: audit: type=1105 audit(1696275788.076:1312): pid=2965 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.083129 kernel: audit: type=1103 audit(1696275788.078:1313): pid=2967 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.076000 audit[2965]: USER_START pid=2965 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.078000 audit[2967]: CRED_ACQ pid=2967 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.174219 sshd[2965]: pam_unix(sshd:session): session closed for user core Oct 2 19:43:08.174000 audit[2965]: USER_END pid=2965 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.177683 systemd[1]: Started sshd@28-10.0.0.10:22-10.0.0.1:42786.service. Oct 2 19:43:08.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.10:22-10.0.0.1:42786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:08.179054 kernel: audit: type=1106 audit(1696275788.174:1314): pid=2965 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.179099 kernel: audit: type=1130 audit(1696275788.177:1315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.10:22-10.0.0.1:42786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:08.177000 audit[2965]: CRED_DISP pid=2965 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.10:22-10.0.0.1:42782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:08.179825 systemd[1]: sshd@27-10.0.0.10:22-10.0.0.1:42782.service: Deactivated successfully. Oct 2 19:43:08.180462 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:43:08.181096 systemd-logind[1087]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:43:08.181660 systemd-logind[1087]: Removed session 28. Oct 2 19:43:08.207000 audit[2979]: USER_ACCT pid=2979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.208508 sshd[2979]: Accepted publickey for core from 10.0.0.1 port 42786 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:43:08.208000 audit[2979]: CRED_ACQ pid=2979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.208000 audit[2979]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca55fa3f0 a2=3 a3=0 items=0 ppid=1 pid=2979 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:08.208000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:43:08.209470 sshd[2979]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:43:08.212566 systemd-logind[1087]: New session 29 of user core. Oct 2 19:43:08.213299 systemd[1]: Started session-29.scope. Oct 2 19:43:08.215000 audit[2979]: USER_START pid=2979 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:08.216000 audit[2983]: CRED_ACQ pid=2983 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:09.556656 env[1098]: time="2023-10-02T19:43:09.556598101Z" level=info msg="StopPodSandbox for \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\"" Oct 2 19:43:09.557127 env[1098]: time="2023-10-02T19:43:09.556686698Z" level=info msg="Container to stop \"b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:43:09.558191 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1-shm.mount: Deactivated successfully. Oct 2 19:43:09.565000 audit: BPF prog-id=109 op=UNLOAD Oct 2 19:43:09.566252 systemd[1]: cri-containerd-c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1.scope: Deactivated successfully. Oct 2 19:43:09.570000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:43:09.574874 env[1098]: time="2023-10-02T19:43:09.574827035Z" level=info msg="StopContainer for \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\" with timeout 30 (s)" Oct 2 19:43:09.576272 env[1098]: time="2023-10-02T19:43:09.575359660Z" level=info msg="Stop container \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\" with signal terminated" Oct 2 19:43:09.585000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:43:09.586668 systemd[1]: cri-containerd-7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d.scope: Deactivated successfully. Oct 2 19:43:09.591000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:43:09.594296 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1-rootfs.mount: Deactivated successfully. Oct 2 19:43:09.607149 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d-rootfs.mount: Deactivated successfully. Oct 2 19:43:09.624401 kubelet[2004]: E1002 19:43:09.624375 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:09.812722 env[1098]: time="2023-10-02T19:43:09.812589496Z" level=info msg="shim disconnected" id=c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1 Oct 2 19:43:09.812722 env[1098]: time="2023-10-02T19:43:09.812641344Z" level=warning msg="cleaning up after shim disconnected" id=c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1 namespace=k8s.io Oct 2 19:43:09.812722 env[1098]: time="2023-10-02T19:43:09.812668665Z" level=info msg="shim disconnected" id=7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d Oct 2 19:43:09.812899 env[1098]: time="2023-10-02T19:43:09.812722858Z" level=warning msg="cleaning up after shim disconnected" id=7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d namespace=k8s.io Oct 2 19:43:09.812899 env[1098]: time="2023-10-02T19:43:09.812737034Z" level=info msg="cleaning up dead shim" Oct 2 19:43:09.813314 env[1098]: time="2023-10-02T19:43:09.812652966Z" level=info msg="cleaning up dead shim" Oct 2 19:43:09.819390 env[1098]: time="2023-10-02T19:43:09.819325775Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3026 runtime=io.containerd.runc.v2\n" Oct 2 19:43:09.820399 env[1098]: time="2023-10-02T19:43:09.820331073Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3027 runtime=io.containerd.runc.v2\n" Oct 2 19:43:09.820710 env[1098]: time="2023-10-02T19:43:09.820679881Z" level=info msg="TearDown network for sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" successfully" Oct 2 19:43:09.820710 env[1098]: time="2023-10-02T19:43:09.820703986Z" level=info msg="StopPodSandbox for \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" returns successfully" Oct 2 19:43:09.881880 env[1098]: time="2023-10-02T19:43:09.881815894Z" level=info msg="StopContainer for \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\" returns successfully" Oct 2 19:43:09.882802 env[1098]: time="2023-10-02T19:43:09.882743425Z" level=info msg="StopPodSandbox for \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\"" Oct 2 19:43:09.883022 env[1098]: time="2023-10-02T19:43:09.882818717Z" level=info msg="Container to stop \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:43:09.884911 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b-shm.mount: Deactivated successfully. Oct 2 19:43:09.891785 systemd[1]: cri-containerd-c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b.scope: Deactivated successfully. Oct 2 19:43:09.890000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:43:09.896000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:43:09.908071 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b-rootfs.mount: Deactivated successfully. Oct 2 19:43:09.912448 env[1098]: time="2023-10-02T19:43:09.912411363Z" level=info msg="shim disconnected" id=c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b Oct 2 19:43:09.912589 env[1098]: time="2023-10-02T19:43:09.912571004Z" level=warning msg="cleaning up after shim disconnected" id=c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b namespace=k8s.io Oct 2 19:43:09.912589 env[1098]: time="2023-10-02T19:43:09.912587175Z" level=info msg="cleaning up dead shim" Oct 2 19:43:09.919978 env[1098]: time="2023-10-02T19:43:09.919927946Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3068 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:09Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Oct 2 19:43:09.920306 env[1098]: time="2023-10-02T19:43:09.920272165Z" level=info msg="TearDown network for sandbox \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\" successfully" Oct 2 19:43:09.920365 env[1098]: time="2023-10-02T19:43:09.920304677Z" level=info msg="StopPodSandbox for \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\" returns successfully" Oct 2 19:43:09.948410 kubelet[2004]: I1002 19:43:09.948381 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/09d97a73-9473-483a-a374-8fd76b1aee59-cilium-config-path\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.948555 kubelet[2004]: I1002 19:43:09.948428 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-cilium-run\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.948555 kubelet[2004]: I1002 19:43:09.948448 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-etc-cni-netd\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.948555 kubelet[2004]: I1002 19:43:09.948462 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-hostproc\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.948555 kubelet[2004]: I1002 19:43:09.948499 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:09.948654 kubelet[2004]: I1002 19:43:09.948541 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:09.948654 kubelet[2004]: I1002 19:43:09.948592 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-hostproc" (OuterVolumeSpecName: "hostproc") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:09.948654 kubelet[2004]: I1002 19:43:09.948568 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-host-proc-sys-kernel\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.948654 kubelet[2004]: I1002 19:43:09.948609 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:09.948654 kubelet[2004]: W1002 19:43:09.948634 2004 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/09d97a73-9473-483a-a374-8fd76b1aee59/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:43:09.948654 kubelet[2004]: I1002 19:43:09.948649 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-bpf-maps\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.948786 kubelet[2004]: I1002 19:43:09.948683 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-host-proc-sys-net\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.948786 kubelet[2004]: I1002 19:43:09.948701 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-xtables-lock\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.948786 kubelet[2004]: I1002 19:43:09.948716 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:09.948786 kubelet[2004]: I1002 19:43:09.948729 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-lib-modules\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.948786 kubelet[2004]: I1002 19:43:09.948732 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:09.948786 kubelet[2004]: I1002 19:43:09.948747 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-cilium-cgroup\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.948786 kubelet[2004]: I1002 19:43:09.948748 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:09.948786 kubelet[2004]: I1002 19:43:09.948765 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-cni-path\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.948786 kubelet[2004]: I1002 19:43:09.948766 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:09.948786 kubelet[2004]: I1002 19:43:09.948780 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:09.948786 kubelet[2004]: I1002 19:43:09.948790 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-cl5hh\" (UniqueName: \"kubernetes.io/projected/09d97a73-9473-483a-a374-8fd76b1aee59-kube-api-access-cl5hh\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948794 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-cni-path" (OuterVolumeSpecName: "cni-path") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948810 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/09d97a73-9473-483a-a374-8fd76b1aee59-clustermesh-secrets\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948829 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/09d97a73-9473-483a-a374-8fd76b1aee59-hubble-tls\") pod \"09d97a73-9473-483a-a374-8fd76b1aee59\" (UID: \"09d97a73-9473-483a-a374-8fd76b1aee59\") " Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948877 2004 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948886 2004 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948894 2004 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948905 2004 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948912 2004 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948920 2004 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948928 2004 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948936 2004 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948944 2004 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:09.949152 kubelet[2004]: I1002 19:43:09.948952 2004 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/09d97a73-9473-483a-a374-8fd76b1aee59-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:09.950307 kubelet[2004]: I1002 19:43:09.950266 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/09d97a73-9473-483a-a374-8fd76b1aee59-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:43:09.951606 kubelet[2004]: I1002 19:43:09.951587 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/09d97a73-9473-483a-a374-8fd76b1aee59-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:43:09.951681 kubelet[2004]: I1002 19:43:09.951594 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/09d97a73-9473-483a-a374-8fd76b1aee59-kube-api-access-cl5hh" (OuterVolumeSpecName: "kube-api-access-cl5hh") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "kube-api-access-cl5hh". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:43:09.952182 kubelet[2004]: I1002 19:43:09.952165 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/09d97a73-9473-483a-a374-8fd76b1aee59-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "09d97a73-9473-483a-a374-8fd76b1aee59" (UID: "09d97a73-9473-483a-a374-8fd76b1aee59"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:43:10.049701 kubelet[2004]: I1002 19:43:10.049665 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-rhm9r\" (UniqueName: \"kubernetes.io/projected/edaa949e-acbb-4a34-9745-6deb560ba5fd-kube-api-access-rhm9r\") pod \"edaa949e-acbb-4a34-9745-6deb560ba5fd\" (UID: \"edaa949e-acbb-4a34-9745-6deb560ba5fd\") " Oct 2 19:43:10.049809 kubelet[2004]: I1002 19:43:10.049726 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/edaa949e-acbb-4a34-9745-6deb560ba5fd-cilium-config-path\") pod \"edaa949e-acbb-4a34-9745-6deb560ba5fd\" (UID: \"edaa949e-acbb-4a34-9745-6deb560ba5fd\") " Oct 2 19:43:10.049809 kubelet[2004]: I1002 19:43:10.049764 2004 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-cl5hh\" (UniqueName: \"kubernetes.io/projected/09d97a73-9473-483a-a374-8fd76b1aee59-kube-api-access-cl5hh\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:10.049809 kubelet[2004]: I1002 19:43:10.049779 2004 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/09d97a73-9473-483a-a374-8fd76b1aee59-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:10.049809 kubelet[2004]: I1002 19:43:10.049793 2004 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/09d97a73-9473-483a-a374-8fd76b1aee59-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:10.049809 kubelet[2004]: I1002 19:43:10.049805 2004 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/09d97a73-9473-483a-a374-8fd76b1aee59-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:10.050094 kubelet[2004]: W1002 19:43:10.050008 2004 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/edaa949e-acbb-4a34-9745-6deb560ba5fd/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:43:10.051683 kubelet[2004]: I1002 19:43:10.051647 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/edaa949e-acbb-4a34-9745-6deb560ba5fd-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "edaa949e-acbb-4a34-9745-6deb560ba5fd" (UID: "edaa949e-acbb-4a34-9745-6deb560ba5fd"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:43:10.051907 kubelet[2004]: I1002 19:43:10.051881 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/edaa949e-acbb-4a34-9745-6deb560ba5fd-kube-api-access-rhm9r" (OuterVolumeSpecName: "kube-api-access-rhm9r") pod "edaa949e-acbb-4a34-9745-6deb560ba5fd" (UID: "edaa949e-acbb-4a34-9745-6deb560ba5fd"). InnerVolumeSpecName "kube-api-access-rhm9r". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:43:10.085380 kubelet[2004]: I1002 19:43:10.085267 2004 scope.go:115] "RemoveContainer" containerID="b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6" Oct 2 19:43:10.086335 env[1098]: time="2023-10-02T19:43:10.086300007Z" level=info msg="RemoveContainer for \"b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6\"" Oct 2 19:43:10.090788 systemd[1]: Removed slice kubepods-besteffort-podedaa949e_acbb_4a34_9745_6deb560ba5fd.slice. Oct 2 19:43:10.091693 systemd[1]: Removed slice kubepods-burstable-pod09d97a73_9473_483a_a374_8fd76b1aee59.slice. Oct 2 19:43:10.112000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:10.112000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00126b3e0 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:43:10.112000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:10.112000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:10.112000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c00121c660 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:43:10.112000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:10.120267 env[1098]: time="2023-10-02T19:43:10.120223648Z" level=info msg="RemoveContainer for \"b251bf7283a61ab89e49bb9bae5d5f649e9e8e5e6a995d58fc55a83ddbb45bc6\" returns successfully" Oct 2 19:43:10.120514 kubelet[2004]: I1002 19:43:10.120495 2004 scope.go:115] "RemoveContainer" containerID="7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d" Oct 2 19:43:10.121908 env[1098]: time="2023-10-02T19:43:10.121874634Z" level=info msg="RemoveContainer for \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\"" Oct 2 19:43:10.131512 env[1098]: time="2023-10-02T19:43:10.131468603Z" level=info msg="RemoveContainer for \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\" returns successfully" Oct 2 19:43:10.131773 kubelet[2004]: I1002 19:43:10.131725 2004 scope.go:115] "RemoveContainer" containerID="7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d" Oct 2 19:43:10.132052 env[1098]: time="2023-10-02T19:43:10.131951534Z" level=error msg="ContainerStatus for \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\": not found" Oct 2 19:43:10.132240 kubelet[2004]: E1002 19:43:10.132122 2004 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\": not found" containerID="7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d" Oct 2 19:43:10.132240 kubelet[2004]: I1002 19:43:10.132157 2004 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d} err="failed to get container status \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\": rpc error: code = NotFound desc = an error occurred when try to find container \"7d7ae4882e374465561083c8950d97a581f1d5b77b64d1ff9bcf5ad510c44a7d\": not found" Oct 2 19:43:10.150136 kubelet[2004]: I1002 19:43:10.150096 2004 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-rhm9r\" (UniqueName: \"kubernetes.io/projected/edaa949e-acbb-4a34-9745-6deb560ba5fd-kube-api-access-rhm9r\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:10.150136 kubelet[2004]: I1002 19:43:10.150125 2004 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/edaa949e-acbb-4a34-9745-6deb560ba5fd-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:43:10.317626 kubelet[2004]: I1002 19:43:10.317583 2004 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:43:10.317626 kubelet[2004]: I1002 19:43:10.317614 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:43:10.319575 env[1098]: time="2023-10-02T19:43:10.319542326Z" level=info msg="StopPodSandbox for \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\"" Oct 2 19:43:10.319684 env[1098]: time="2023-10-02T19:43:10.319611455Z" level=info msg="TearDown network for sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" successfully" Oct 2 19:43:10.319684 env[1098]: time="2023-10-02T19:43:10.319642284Z" level=info msg="StopPodSandbox for \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" returns successfully" Oct 2 19:43:10.320086 env[1098]: time="2023-10-02T19:43:10.319995661Z" level=info msg="RemovePodSandbox for \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\"" Oct 2 19:43:10.320142 env[1098]: time="2023-10-02T19:43:10.320056155Z" level=info msg="Forcibly stopping sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\"" Oct 2 19:43:10.320190 env[1098]: time="2023-10-02T19:43:10.320150032Z" level=info msg="TearDown network for sandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" successfully" Oct 2 19:43:10.323100 env[1098]: time="2023-10-02T19:43:10.323077168Z" level=info msg="RemovePodSandbox \"c0e9d5cb0393d70bb195cffd459203a419b469401799ccb6a2bf7ad8b6ecf1c1\" returns successfully" Oct 2 19:43:10.323416 env[1098]: time="2023-10-02T19:43:10.323395930Z" level=info msg="StopPodSandbox for \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\"" Oct 2 19:43:10.323490 env[1098]: time="2023-10-02T19:43:10.323445593Z" level=info msg="TearDown network for sandbox \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\" successfully" Oct 2 19:43:10.323490 env[1098]: time="2023-10-02T19:43:10.323479547Z" level=info msg="StopPodSandbox for \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\" returns successfully" Oct 2 19:43:10.323666 env[1098]: time="2023-10-02T19:43:10.323653335Z" level=info msg="RemovePodSandbox for \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\"" Oct 2 19:43:10.323690 env[1098]: time="2023-10-02T19:43:10.323668394Z" level=info msg="Forcibly stopping sandbox \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\"" Oct 2 19:43:10.323717 env[1098]: time="2023-10-02T19:43:10.323707998Z" level=info msg="TearDown network for sandbox \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\" successfully" Oct 2 19:43:10.326092 env[1098]: time="2023-10-02T19:43:10.326064877Z" level=info msg="RemovePodSandbox \"c51eddbd743b265175fd59fc054ee76696f9b8e0c92b26ec9d19d5e9ed12210b\" returns successfully" Oct 2 19:43:10.326448 kubelet[2004]: I1002 19:43:10.326422 2004 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:43:10.327739 kubelet[2004]: I1002 19:43:10.327720 2004 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b" size=166719855 Oct 2 19:43:10.327877 env[1098]: time="2023-10-02T19:43:10.327844556Z" level=info msg="RemoveImage \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:43:10.328838 env[1098]: time="2023-10-02T19:43:10.328814357Z" level=info msg="ImageDelete event &ImageDelete{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,XXX_unrecognized:[],}" Oct 2 19:43:10.329551 env[1098]: time="2023-10-02T19:43:10.329521200Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,XXX_unrecognized:[],}" Oct 2 19:43:10.453734 env[1098]: time="2023-10-02T19:43:10.453670785Z" level=info msg="RemoveImage \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\" returns successfully" Oct 2 19:43:10.453970 kubelet[2004]: I1002 19:43:10.453946 2004 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c" size=18897442 Oct 2 19:43:10.454235 env[1098]: time="2023-10-02T19:43:10.454204352Z" level=info msg="RemoveImage \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:43:10.455670 env[1098]: time="2023-10-02T19:43:10.455622008Z" level=info msg="ImageDelete event &ImageDelete{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,XXX_unrecognized:[],}" Oct 2 19:43:10.456404 env[1098]: time="2023-10-02T19:43:10.456372144Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,XXX_unrecognized:[],}" Oct 2 19:43:10.467736 env[1098]: time="2023-10-02T19:43:10.467680518Z" level=info msg="RemoveImage \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\" returns successfully" Oct 2 19:43:10.475200 kubelet[2004]: I1002 19:43:10.475163 2004 eviction_manager.go:352] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:43:10.476154 kubelet[2004]: I1002 19:43:10.476135 2004 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=09d97a73-9473-483a-a374-8fd76b1aee59 path="/var/lib/kubelet/pods/09d97a73-9473-483a-a374-8fd76b1aee59/volumes" Oct 2 19:43:10.476635 kubelet[2004]: I1002 19:43:10.476615 2004 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=edaa949e-acbb-4a34-9745-6deb560ba5fd path="/var/lib/kubelet/pods/edaa949e-acbb-4a34-9745-6deb560ba5fd/volumes" Oct 2 19:43:10.558133 systemd[1]: var-lib-kubelet-pods-edaa949e\x2dacbb\x2d4a34\x2d9745\x2d6deb560ba5fd-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2drhm9r.mount: Deactivated successfully. Oct 2 19:43:10.558250 systemd[1]: var-lib-kubelet-pods-09d97a73\x2d9473\x2d483a\x2da374\x2d8fd76b1aee59-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dcl5hh.mount: Deactivated successfully. Oct 2 19:43:10.558302 systemd[1]: var-lib-kubelet-pods-09d97a73\x2d9473\x2d483a\x2da374\x2d8fd76b1aee59-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:43:10.558359 systemd[1]: var-lib-kubelet-pods-09d97a73\x2d9473\x2d483a\x2da374\x2d8fd76b1aee59-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:43:10.977000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:10.977000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:10.977000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c0082548a0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:43:10.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:43:10.977000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00969bf80 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:43:10.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:43:10.977000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:10.977000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00f0ce900 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:43:10.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:43:10.977000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:10.977000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c008194210 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:43:10.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:43:10.984000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:10.984000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c0095f49f0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:43:10.984000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:43:10.985000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:10.985000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c00f0ce920 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:43:10.985000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:43:11.522628 sshd[2979]: pam_unix(sshd:session): session closed for user core Oct 2 19:43:11.522000 audit[2979]: USER_END pid=2979 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:11.522000 audit[2979]: CRED_DISP pid=2979 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:11.525375 systemd[1]: sshd@28-10.0.0.10:22-10.0.0.1:42786.service: Deactivated successfully. Oct 2 19:43:11.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.10:22-10.0.0.1:42786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:11.525918 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:43:11.526489 systemd-logind[1087]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:43:11.527472 systemd[1]: Started sshd@29-10.0.0.10:22-10.0.0.1:42800.service. Oct 2 19:43:11.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.10:22-10.0.0.1:42800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:11.528330 systemd-logind[1087]: Removed session 29. Oct 2 19:43:11.564000 audit[3086]: USER_ACCT pid=3086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:11.565695 sshd[3086]: Accepted publickey for core from 10.0.0.1 port 42800 ssh2: RSA SHA256:NgATMQDnUD9aUNjhhJmB2GfJkyCVZ14bUDm9dIaEVw0 Oct 2 19:43:11.565000 audit[3086]: CRED_ACQ pid=3086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:11.565000 audit[3086]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8b6afec0 a2=3 a3=0 items=0 ppid=1 pid=3086 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:11.565000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:43:11.566764 sshd[3086]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:43:11.569872 systemd-logind[1087]: New session 30 of user core. Oct 2 19:43:11.570783 systemd[1]: Started session-30.scope. Oct 2 19:43:11.573000 audit[3086]: USER_START pid=3086 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:11.574000 audit[3088]: CRED_ACQ pid=3088 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:11.981330 kubelet[2004]: I1002 19:43:11.980239 2004 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:43:11.981330 kubelet[2004]: E1002 19:43:11.980287 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="09d97a73-9473-483a-a374-8fd76b1aee59" containerName="mount-cgroup" Oct 2 19:43:11.981330 kubelet[2004]: E1002 19:43:11.980294 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="edaa949e-acbb-4a34-9745-6deb560ba5fd" containerName="cilium-operator" Oct 2 19:43:11.981330 kubelet[2004]: E1002 19:43:11.980300 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="09d97a73-9473-483a-a374-8fd76b1aee59" containerName="mount-cgroup" Oct 2 19:43:11.981330 kubelet[2004]: E1002 19:43:11.980306 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="09d97a73-9473-483a-a374-8fd76b1aee59" containerName="mount-cgroup" Oct 2 19:43:11.981330 kubelet[2004]: E1002 19:43:11.980311 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="09d97a73-9473-483a-a374-8fd76b1aee59" containerName="mount-cgroup" Oct 2 19:43:11.981330 kubelet[2004]: I1002 19:43:11.980332 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="09d97a73-9473-483a-a374-8fd76b1aee59" containerName="mount-cgroup" Oct 2 19:43:11.981330 kubelet[2004]: I1002 19:43:11.980338 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="09d97a73-9473-483a-a374-8fd76b1aee59" containerName="mount-cgroup" Oct 2 19:43:11.981330 kubelet[2004]: I1002 19:43:11.980343 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="edaa949e-acbb-4a34-9745-6deb560ba5fd" containerName="cilium-operator" Oct 2 19:43:11.981330 kubelet[2004]: I1002 19:43:11.980348 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="09d97a73-9473-483a-a374-8fd76b1aee59" containerName="mount-cgroup" Oct 2 19:43:11.981330 kubelet[2004]: I1002 19:43:11.980352 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="09d97a73-9473-483a-a374-8fd76b1aee59" containerName="mount-cgroup" Oct 2 19:43:11.981330 kubelet[2004]: E1002 19:43:11.980365 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="09d97a73-9473-483a-a374-8fd76b1aee59" containerName="mount-cgroup" Oct 2 19:43:11.981330 kubelet[2004]: I1002 19:43:11.980378 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="09d97a73-9473-483a-a374-8fd76b1aee59" containerName="mount-cgroup" Oct 2 19:43:11.981330 kubelet[2004]: E1002 19:43:11.980391 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="09d97a73-9473-483a-a374-8fd76b1aee59" containerName="mount-cgroup" Oct 2 19:43:11.981330 kubelet[2004]: I1002 19:43:11.980405 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="09d97a73-9473-483a-a374-8fd76b1aee59" containerName="mount-cgroup" Oct 2 19:43:11.984885 kubelet[2004]: W1002 19:43:11.984840 2004 reflector.go:424] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:43:11.984885 kubelet[2004]: E1002 19:43:11.984866 2004 reflector.go:140] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:43:11.985547 systemd[1]: Created slice kubepods-burstable-podd4c1fe27_4805_4e1f_85d2_b378fe202268.slice. Oct 2 19:43:11.987278 kubelet[2004]: W1002 19:43:11.987211 2004 reflector.go:424] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:43:11.987278 kubelet[2004]: E1002 19:43:11.987229 2004 reflector.go:140] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:43:11.987278 kubelet[2004]: W1002 19:43:11.987255 2004 reflector.go:424] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:43:11.987278 kubelet[2004]: E1002 19:43:11.987262 2004 reflector.go:140] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:43:12.061287 kubelet[2004]: I1002 19:43:12.061244 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-xtables-lock\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061287 kubelet[2004]: I1002 19:43:12.061300 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-config-path\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061516 kubelet[2004]: I1002 19:43:12.061326 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-hostproc\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061516 kubelet[2004]: I1002 19:43:12.061351 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-cgroup\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061516 kubelet[2004]: I1002 19:43:12.061459 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-run\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061516 kubelet[2004]: I1002 19:43:12.061504 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-host-proc-sys-kernel\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061636 kubelet[2004]: I1002 19:43:12.061613 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8h6v4\" (UniqueName: \"kubernetes.io/projected/d4c1fe27-4805-4e1f-85d2-b378fe202268-kube-api-access-8h6v4\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061688 kubelet[2004]: I1002 19:43:12.061672 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-host-proc-sys-net\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061785 kubelet[2004]: I1002 19:43:12.061763 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d4c1fe27-4805-4e1f-85d2-b378fe202268-hubble-tls\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061829 kubelet[2004]: I1002 19:43:12.061804 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-etc-cni-netd\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061864 kubelet[2004]: I1002 19:43:12.061831 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-lib-modules\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061907 kubelet[2004]: I1002 19:43:12.061869 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-cni-path\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061907 kubelet[2004]: I1002 19:43:12.061895 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-ipsec-secrets\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061979 kubelet[2004]: I1002 19:43:12.061923 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-bpf-maps\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:12.061979 kubelet[2004]: I1002 19:43:12.061956 2004 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d4c1fe27-4805-4e1f-85d2-b378fe202268-clustermesh-secrets\") pod \"cilium-kxckk\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " pod="kube-system/cilium-kxckk" Oct 2 19:43:13.197137 kubelet[2004]: E1002 19:43:13.194856 2004 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 19:43:13.197137 kubelet[2004]: E1002 19:43:13.195017 2004 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/d4c1fe27-4805-4e1f-85d2-b378fe202268-clustermesh-secrets podName:d4c1fe27-4805-4e1f-85d2-b378fe202268 nodeName:}" failed. No retries permitted until 2023-10-02 19:43:13.694984421 +0000 UTC m=+239.353184796 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/d4c1fe27-4805-4e1f-85d2-b378fe202268-clustermesh-secrets") pod "cilium-kxckk" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:43:13.197697 kubelet[2004]: E1002 19:43:13.197216 2004 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:43:13.197697 kubelet[2004]: E1002 19:43:13.197244 2004 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-kxckk: failed to sync secret cache: timed out waiting for the condition Oct 2 19:43:13.197697 kubelet[2004]: E1002 19:43:13.197327 2004 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/d4c1fe27-4805-4e1f-85d2-b378fe202268-hubble-tls podName:d4c1fe27-4805-4e1f-85d2-b378fe202268 nodeName:}" failed. No retries permitted until 2023-10-02 19:43:13.6973072 +0000 UTC m=+239.355507575 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/d4c1fe27-4805-4e1f-85d2-b378fe202268-hubble-tls") pod "cilium-kxckk" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:43:14.087653 kubelet[2004]: E1002 19:43:14.087606 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:14.088167 env[1098]: time="2023-10-02T19:43:14.088112067Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-kxckk,Uid:d4c1fe27-4805-4e1f-85d2-b378fe202268,Namespace:kube-system,Attempt:0,}" Oct 2 19:43:14.625695 kubelet[2004]: E1002 19:43:14.625662 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:14.644740 env[1098]: time="2023-10-02T19:43:14.644684756Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:14.646789 env[1098]: time="2023-10-02T19:43:14.646744048Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:14.648509 env[1098]: time="2023-10-02T19:43:14.648482765Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:14.649958 env[1098]: time="2023-10-02T19:43:14.649935220Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:14.661013 env[1098]: time="2023-10-02T19:43:14.660947584Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:43:14.661013 env[1098]: time="2023-10-02T19:43:14.660985246Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:43:14.661013 env[1098]: time="2023-10-02T19:43:14.660996547Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:43:14.661211 env[1098]: time="2023-10-02T19:43:14.661149386Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f pid=3109 runtime=io.containerd.runc.v2 Oct 2 19:43:14.672959 systemd[1]: Started cri-containerd-a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f.scope. Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.681220 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:43:14.681267 kernel: audit: type=1400 audit(1696275794.679:1346): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.684805 kernel: audit: type=1400 audit(1696275794.679:1347): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.684844 kernel: audit: type=1400 audit(1696275794.679:1348): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.686634 kernel: audit: type=1400 audit(1696275794.679:1349): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693050 kernel: audit: type=1400 audit(1696275794.679:1350): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693092 kernel: audit: type=1400 audit(1696275794.679:1351): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693107 kernel: audit: type=1400 audit(1696275794.679:1352): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.694424 kernel: audit: type=1400 audit(1696275794.679:1353): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.696334 kernel: audit: type=1400 audit(1696275794.679:1354): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.700976 kernel: audit: type=1400 audit(1696275794.681:1355): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.681000 audit: BPF prog-id=128 op=LOAD Oct 2 19:43:14.685000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.685000 audit[3119]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3109 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:14.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132323333306666633664313739613466313231666131323138373165 Oct 2 19:43:14.685000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.685000 audit[3119]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=3109 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:14.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132323333306666633664313739613466313231666131323138373165 Oct 2 19:43:14.685000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.685000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.685000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.685000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.685000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.685000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.685000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.685000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.685000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.685000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.685000 audit: BPF prog-id=129 op=LOAD Oct 2 19:43:14.685000 audit[3119]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c00020b1e0 items=0 ppid=3109 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:14.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132323333306666633664313739613466313231666131323138373165 Oct 2 19:43:14.691000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.691000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.691000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.691000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.691000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.691000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.691000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.691000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.691000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.691000 audit: BPF prog-id=130 op=LOAD Oct 2 19:43:14.691000 audit[3119]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c00020b228 items=0 ppid=3109 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:14.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132323333306666633664313739613466313231666131323138373165 Oct 2 19:43:14.693000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:43:14.693000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:43:14.693000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693000 audit[3119]: AVC avc: denied { perfmon } for pid=3119 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693000 audit[3119]: AVC avc: denied { bpf } for pid=3119 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.693000 audit: BPF prog-id=131 op=LOAD Oct 2 19:43:14.693000 audit[3119]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c00020b638 items=0 ppid=3109 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:14.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132323333306666633664313739613466313231666131323138373165 Oct 2 19:43:14.717567 env[1098]: time="2023-10-02T19:43:14.717522799Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-kxckk,Uid:d4c1fe27-4805-4e1f-85d2-b378fe202268,Namespace:kube-system,Attempt:0,} returns sandbox id \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\"" Oct 2 19:43:14.718386 kubelet[2004]: E1002 19:43:14.718041 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:14.719441 env[1098]: time="2023-10-02T19:43:14.719419273Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:43:15.888000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:15.888000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025e2da0 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:43:15.888000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:15.892000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:15.892000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002596c40 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:43:15.892000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:15.892000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:15.892000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000da21e0 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:43:15.892000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:15.892000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:15.892000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025e2dc0 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:43:15.892000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:19.627345 kubelet[2004]: E1002 19:43:19.627315 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:19.937001 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4246939157.mount: Deactivated successfully. Oct 2 19:43:23.584659 env[1098]: time="2023-10-02T19:43:23.584593686Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:23.586509 env[1098]: time="2023-10-02T19:43:23.586472367Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:23.590277 env[1098]: time="2023-10-02T19:43:23.590232364Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:23.590972 env[1098]: time="2023-10-02T19:43:23.590939505Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:43:23.592998 env[1098]: time="2023-10-02T19:43:23.592960444Z" level=info msg="CreateContainer within sandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:43:23.603728 env[1098]: time="2023-10-02T19:43:23.603679923Z" level=info msg="CreateContainer within sandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b\"" Oct 2 19:43:23.604084 env[1098]: time="2023-10-02T19:43:23.604056266Z" level=info msg="StartContainer for \"eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b\"" Oct 2 19:43:23.619244 systemd[1]: Started cri-containerd-eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b.scope. Oct 2 19:43:23.625308 systemd[1]: cri-containerd-eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b.scope: Deactivated successfully. Oct 2 19:43:23.625550 systemd[1]: Stopped cri-containerd-eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b.scope. Oct 2 19:43:23.628301 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b-rootfs.mount: Deactivated successfully. Oct 2 19:43:23.850343 env[1098]: time="2023-10-02T19:43:23.850205791Z" level=info msg="shim disconnected" id=eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b Oct 2 19:43:23.850343 env[1098]: time="2023-10-02T19:43:23.850264341Z" level=warning msg="cleaning up after shim disconnected" id=eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b namespace=k8s.io Oct 2 19:43:23.850343 env[1098]: time="2023-10-02T19:43:23.850272807Z" level=info msg="cleaning up dead shim" Oct 2 19:43:23.856918 env[1098]: time="2023-10-02T19:43:23.856877636Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3166 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:23Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:23.857145 env[1098]: time="2023-10-02T19:43:23.857097262Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 19:43:23.857269 env[1098]: time="2023-10-02T19:43:23.857236506Z" level=error msg="Failed to pipe stdout of container \"eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b\"" error="reading from a closed fifo" Oct 2 19:43:23.857353 env[1098]: time="2023-10-02T19:43:23.857296790Z" level=error msg="Failed to pipe stderr of container \"eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b\"" error="reading from a closed fifo" Oct 2 19:43:23.859901 env[1098]: time="2023-10-02T19:43:23.859863686Z" level=error msg="StartContainer for \"eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:23.860172 kubelet[2004]: E1002 19:43:23.860133 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b" Oct 2 19:43:23.860504 kubelet[2004]: E1002 19:43:23.860269 2004 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:23.860504 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:23.860504 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:43:23.860504 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8h6v4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-kxckk_kube-system(d4c1fe27-4805-4e1f-85d2-b378fe202268): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:23.860504 kubelet[2004]: E1002 19:43:23.860318 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-kxckk" podUID=d4c1fe27-4805-4e1f-85d2-b378fe202268 Oct 2 19:43:24.111151 kubelet[2004]: E1002 19:43:24.110845 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:24.115604 env[1098]: time="2023-10-02T19:43:24.114940272Z" level=info msg="CreateContainer within sandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:43:24.166362 env[1098]: time="2023-10-02T19:43:24.166013333Z" level=info msg="CreateContainer within sandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1\"" Oct 2 19:43:24.166980 env[1098]: time="2023-10-02T19:43:24.166879516Z" level=info msg="StartContainer for \"ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1\"" Oct 2 19:43:24.200018 systemd[1]: Started cri-containerd-ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1.scope. Oct 2 19:43:24.211737 systemd[1]: cri-containerd-ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1.scope: Deactivated successfully. Oct 2 19:43:24.212085 systemd[1]: Stopped cri-containerd-ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1.scope. Oct 2 19:43:24.268992 env[1098]: time="2023-10-02T19:43:24.268890253Z" level=info msg="shim disconnected" id=ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1 Oct 2 19:43:24.268992 env[1098]: time="2023-10-02T19:43:24.268952792Z" level=warning msg="cleaning up after shim disconnected" id=ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1 namespace=k8s.io Oct 2 19:43:24.268992 env[1098]: time="2023-10-02T19:43:24.268966498Z" level=info msg="cleaning up dead shim" Oct 2 19:43:24.278441 env[1098]: time="2023-10-02T19:43:24.278294834Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3203 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:24Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:24.278841 env[1098]: time="2023-10-02T19:43:24.278665868Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 19:43:24.279798 env[1098]: time="2023-10-02T19:43:24.279726509Z" level=error msg="Failed to pipe stdout of container \"ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1\"" error="reading from a closed fifo" Oct 2 19:43:24.280078 env[1098]: time="2023-10-02T19:43:24.279918122Z" level=error msg="Failed to pipe stderr of container \"ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1\"" error="reading from a closed fifo" Oct 2 19:43:24.292834 env[1098]: time="2023-10-02T19:43:24.292368868Z" level=error msg="StartContainer for \"ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:24.293113 kubelet[2004]: E1002 19:43:24.292722 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1" Oct 2 19:43:24.293113 kubelet[2004]: E1002 19:43:24.292880 2004 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:24.293113 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:24.293113 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:43:24.293113 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8h6v4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-kxckk_kube-system(d4c1fe27-4805-4e1f-85d2-b378fe202268): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:24.293113 kubelet[2004]: E1002 19:43:24.292926 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-kxckk" podUID=d4c1fe27-4805-4e1f-85d2-b378fe202268 Oct 2 19:43:24.473815 kubelet[2004]: E1002 19:43:24.473780 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:24.627934 kubelet[2004]: E1002 19:43:24.627900 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:25.113077 kubelet[2004]: I1002 19:43:25.113050 2004 scope.go:115] "RemoveContainer" containerID="eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b" Oct 2 19:43:25.114480 kubelet[2004]: I1002 19:43:25.113432 2004 scope.go:115] "RemoveContainer" containerID="eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b" Oct 2 19:43:25.115067 env[1098]: time="2023-10-02T19:43:25.115021579Z" level=info msg="RemoveContainer for \"eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b\"" Oct 2 19:43:25.115417 env[1098]: time="2023-10-02T19:43:25.115246085Z" level=info msg="RemoveContainer for \"eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b\"" Oct 2 19:43:25.115595 env[1098]: time="2023-10-02T19:43:25.115512139Z" level=error msg="RemoveContainer for \"eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b\" failed" error="failed to set removing state for container \"eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b\": container is already in removing state" Oct 2 19:43:25.115833 kubelet[2004]: E1002 19:43:25.115708 2004 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b\": container is already in removing state" containerID="eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b" Oct 2 19:43:25.115833 kubelet[2004]: E1002 19:43:25.115750 2004 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b": container is already in removing state; Skipping pod "cilium-kxckk_kube-system(d4c1fe27-4805-4e1f-85d2-b378fe202268)" Oct 2 19:43:25.115833 kubelet[2004]: E1002 19:43:25.115820 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:25.116325 kubelet[2004]: E1002 19:43:25.116090 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-kxckk_kube-system(d4c1fe27-4805-4e1f-85d2-b378fe202268)\"" pod="kube-system/cilium-kxckk" podUID=d4c1fe27-4805-4e1f-85d2-b378fe202268 Oct 2 19:43:25.118347 env[1098]: time="2023-10-02T19:43:25.118312259Z" level=info msg="RemoveContainer for \"eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b\" returns successfully" Oct 2 19:43:26.115896 kubelet[2004]: E1002 19:43:26.115865 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:26.116312 kubelet[2004]: E1002 19:43:26.116109 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-kxckk_kube-system(d4c1fe27-4805-4e1f-85d2-b378fe202268)\"" pod="kube-system/cilium-kxckk" podUID=d4c1fe27-4805-4e1f-85d2-b378fe202268 Oct 2 19:43:26.955768 kubelet[2004]: W1002 19:43:26.955725 2004 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd4c1fe27_4805_4e1f_85d2_b378fe202268.slice/cri-containerd-eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b.scope WatchSource:0}: container "eaeae7fc8ae09ffd44b5807805a3dffdf723e8120d66b1f6f9bd73b5812fd05b" in namespace "k8s.io": not found Oct 2 19:43:29.628814 kubelet[2004]: E1002 19:43:29.628777 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:30.060923 kubelet[2004]: W1002 19:43:30.060884 2004 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd4c1fe27_4805_4e1f_85d2_b378fe202268.slice/cri-containerd-ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1.scope WatchSource:0}: task ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1 not found: not found Oct 2 19:43:34.473751 kubelet[2004]: E1002 19:43:34.473716 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:34.629994 kubelet[2004]: E1002 19:43:34.629950 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:39.474117 kubelet[2004]: E1002 19:43:39.474086 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:39.475721 env[1098]: time="2023-10-02T19:43:39.475691159Z" level=info msg="CreateContainer within sandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:43:39.486354 env[1098]: time="2023-10-02T19:43:39.486306261Z" level=info msg="CreateContainer within sandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1\"" Oct 2 19:43:39.486909 env[1098]: time="2023-10-02T19:43:39.486884141Z" level=info msg="StartContainer for \"7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1\"" Oct 2 19:43:39.502094 systemd[1]: Started cri-containerd-7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1.scope. Oct 2 19:43:39.507553 systemd[1]: cri-containerd-7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1.scope: Deactivated successfully. Oct 2 19:43:39.507762 systemd[1]: Stopped cri-containerd-7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1.scope. Oct 2 19:43:39.514941 env[1098]: time="2023-10-02T19:43:39.514894247Z" level=info msg="shim disconnected" id=7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1 Oct 2 19:43:39.515107 env[1098]: time="2023-10-02T19:43:39.514946247Z" level=warning msg="cleaning up after shim disconnected" id=7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1 namespace=k8s.io Oct 2 19:43:39.515107 env[1098]: time="2023-10-02T19:43:39.514960604Z" level=info msg="cleaning up dead shim" Oct 2 19:43:39.520054 env[1098]: time="2023-10-02T19:43:39.519991679Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3242 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:39Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:39.520299 env[1098]: time="2023-10-02T19:43:39.520248128Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 19:43:39.520440 env[1098]: time="2023-10-02T19:43:39.520401219Z" level=error msg="Failed to pipe stdout of container \"7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1\"" error="reading from a closed fifo" Oct 2 19:43:39.521321 env[1098]: time="2023-10-02T19:43:39.521291253Z" level=error msg="Failed to pipe stderr of container \"7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1\"" error="reading from a closed fifo" Oct 2 19:43:39.523419 env[1098]: time="2023-10-02T19:43:39.523381471Z" level=error msg="StartContainer for \"7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:39.523586 kubelet[2004]: E1002 19:43:39.523560 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1" Oct 2 19:43:39.523686 kubelet[2004]: E1002 19:43:39.523668 2004 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:39.523686 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:39.523686 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:43:39.523686 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8h6v4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-kxckk_kube-system(d4c1fe27-4805-4e1f-85d2-b378fe202268): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:39.523853 kubelet[2004]: E1002 19:43:39.523714 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-kxckk" podUID=d4c1fe27-4805-4e1f-85d2-b378fe202268 Oct 2 19:43:39.630862 kubelet[2004]: E1002 19:43:39.630844 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:40.136867 kubelet[2004]: I1002 19:43:40.136841 2004 scope.go:115] "RemoveContainer" containerID="ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1" Oct 2 19:43:40.137176 kubelet[2004]: I1002 19:43:40.137149 2004 scope.go:115] "RemoveContainer" containerID="ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1" Oct 2 19:43:40.137729 env[1098]: time="2023-10-02T19:43:40.137694935Z" level=info msg="RemoveContainer for \"ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1\"" Oct 2 19:43:40.137957 env[1098]: time="2023-10-02T19:43:40.137932398Z" level=info msg="RemoveContainer for \"ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1\"" Oct 2 19:43:40.138111 env[1098]: time="2023-10-02T19:43:40.138072294Z" level=error msg="RemoveContainer for \"ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1\" failed" error="failed to set removing state for container \"ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1\": container is already in removing state" Oct 2 19:43:40.138203 kubelet[2004]: E1002 19:43:40.138169 2004 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1\": container is already in removing state" containerID="ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1" Oct 2 19:43:40.138203 kubelet[2004]: E1002 19:43:40.138199 2004 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1": container is already in removing state; Skipping pod "cilium-kxckk_kube-system(d4c1fe27-4805-4e1f-85d2-b378fe202268)" Oct 2 19:43:40.138373 kubelet[2004]: E1002 19:43:40.138239 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:40.138415 kubelet[2004]: E1002 19:43:40.138404 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-kxckk_kube-system(d4c1fe27-4805-4e1f-85d2-b378fe202268)\"" pod="kube-system/cilium-kxckk" podUID=d4c1fe27-4805-4e1f-85d2-b378fe202268 Oct 2 19:43:40.140649 env[1098]: time="2023-10-02T19:43:40.140617569Z" level=info msg="RemoveContainer for \"ad44b074b86fb3f12533ed437aeaec2206ebffa4fc43a02087124a916b6fc0b1\" returns successfully" Oct 2 19:43:40.482629 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1-rootfs.mount: Deactivated successfully. Oct 2 19:43:42.620158 kubelet[2004]: W1002 19:43:42.620109 2004 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd4c1fe27_4805_4e1f_85d2_b378fe202268.slice/cri-containerd-7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1.scope WatchSource:0}: task 7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1 not found: not found Oct 2 19:43:44.632426 kubelet[2004]: E1002 19:43:44.632399 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:49.634111 kubelet[2004]: E1002 19:43:49.634073 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:54.634718 kubelet[2004]: E1002 19:43:54.634667 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:55.473372 kubelet[2004]: E1002 19:43:55.473336 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:55.473645 kubelet[2004]: E1002 19:43:55.473592 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-kxckk_kube-system(d4c1fe27-4805-4e1f-85d2-b378fe202268)\"" pod="kube-system/cilium-kxckk" podUID=d4c1fe27-4805-4e1f-85d2-b378fe202268 Oct 2 19:43:59.635877 kubelet[2004]: E1002 19:43:59.635847 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:04.638017 kubelet[2004]: E1002 19:44:04.637953 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:06.473733 kubelet[2004]: E1002 19:44:06.473676 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:09.639117 kubelet[2004]: E1002 19:44:09.639080 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:10.112000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.114328 kernel: kauditd_printk_skb: 59 callbacks suppressed Oct 2 19:44:10.114386 kernel: audit: type=1400 audit(1696275850.112:1369): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.112000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.118874 kernel: audit: type=1400 audit(1696275850.112:1368): avc: denied { watch } for pid=1886 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.118904 kernel: audit: type=1300 audit(1696275850.112:1368): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00142cf80 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:44:10.112000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00142cf80 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:44:10.112000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:10.124356 kernel: audit: type=1327 audit(1696275850.112:1368): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:10.124387 kernel: audit: type=1300 audit(1696275850.112:1369): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001181740 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:44:10.112000 audit[1886]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001181740 a2=fc6 a3=0 items=0 ppid=1726 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c96 key=(null) Oct 2 19:44:10.127351 kernel: audit: type=1327 audit(1696275850.112:1369): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:10.112000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:10.473636 kubelet[2004]: E1002 19:44:10.473616 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:10.475469 env[1098]: time="2023-10-02T19:44:10.475433296Z" level=info msg="CreateContainer within sandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:44:10.483612 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2326796439.mount: Deactivated successfully. Oct 2 19:44:10.486537 env[1098]: time="2023-10-02T19:44:10.486490615Z" level=info msg="CreateContainer within sandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4\"" Oct 2 19:44:10.486903 env[1098]: time="2023-10-02T19:44:10.486870552Z" level=info msg="StartContainer for \"245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4\"" Oct 2 19:44:10.501992 systemd[1]: Started cri-containerd-245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4.scope. Oct 2 19:44:10.509130 systemd[1]: cri-containerd-245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4.scope: Deactivated successfully. Oct 2 19:44:10.509387 systemd[1]: Stopped cri-containerd-245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4.scope. Oct 2 19:44:10.518194 env[1098]: time="2023-10-02T19:44:10.518123296Z" level=info msg="shim disconnected" id=245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4 Oct 2 19:44:10.518194 env[1098]: time="2023-10-02T19:44:10.518184093Z" level=warning msg="cleaning up after shim disconnected" id=245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4 namespace=k8s.io Oct 2 19:44:10.518385 env[1098]: time="2023-10-02T19:44:10.518198971Z" level=info msg="cleaning up dead shim" Oct 2 19:44:10.524885 env[1098]: time="2023-10-02T19:44:10.524835060Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:44:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3281 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:44:10Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:44:10.525118 env[1098]: time="2023-10-02T19:44:10.525062806Z" level=error msg="copy shim log" error="read /proc/self/fd/30: file already closed" Oct 2 19:44:10.525279 env[1098]: time="2023-10-02T19:44:10.525236278Z" level=error msg="Failed to pipe stdout of container \"245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4\"" error="reading from a closed fifo" Oct 2 19:44:10.525341 env[1098]: time="2023-10-02T19:44:10.525272727Z" level=error msg="Failed to pipe stderr of container \"245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4\"" error="reading from a closed fifo" Oct 2 19:44:10.527539 env[1098]: time="2023-10-02T19:44:10.527496453Z" level=error msg="StartContainer for \"245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:44:10.527747 kubelet[2004]: E1002 19:44:10.527717 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4" Oct 2 19:44:10.527842 kubelet[2004]: E1002 19:44:10.527827 2004 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:44:10.527842 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:44:10.527842 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:44:10.527842 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8h6v4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-kxckk_kube-system(d4c1fe27-4805-4e1f-85d2-b378fe202268): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:44:10.528005 kubelet[2004]: E1002 19:44:10.527862 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-kxckk" podUID=d4c1fe27-4805-4e1f-85d2-b378fe202268 Oct 2 19:44:10.977000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.977000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.983152 kernel: audit: type=1400 audit(1696275850.977:1370): avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.983226 kernel: audit: type=1400 audit(1696275850.977:1371): avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.983257 kernel: audit: type=1400 audit(1696275850.977:1372): avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.977000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.985510 kernel: audit: type=1300 audit(1696275850.977:1372): arch=c000003e syscall=254 success=no exit=-13 a0=59 a1=c00a8be840 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:44:10.977000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=59 a1=c00a8be840 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:44:10.977000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c0018ef8c0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:44:10.977000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00a9a8780 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:44:10.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:44:10.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:44:10.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:44:10.977000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.977000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00a9a87e0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:44:10.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:44:10.985000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.985000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00a8be8a0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:44:10.985000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:44:10.986000 audit[1879]: AVC avc: denied { watch } for pid=1879 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:10.986000 audit[1879]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c0018ef9e0 a2=fc6 a3=0 items=0 ppid=1709 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c472 key=(null) Oct 2 19:44:10.986000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:44:11.206333 kubelet[2004]: I1002 19:44:11.206306 2004 scope.go:115] "RemoveContainer" containerID="7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1" Oct 2 19:44:11.206661 kubelet[2004]: I1002 19:44:11.206590 2004 scope.go:115] "RemoveContainer" containerID="7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1" Oct 2 19:44:11.207151 env[1098]: time="2023-10-02T19:44:11.207106120Z" level=info msg="RemoveContainer for \"7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1\"" Oct 2 19:44:11.207322 env[1098]: time="2023-10-02T19:44:11.207294992Z" level=info msg="RemoveContainer for \"7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1\"" Oct 2 19:44:11.207394 env[1098]: time="2023-10-02T19:44:11.207358853Z" level=error msg="RemoveContainer for \"7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1\" failed" error="failed to set removing state for container \"7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1\": container is already in removing state" Oct 2 19:44:11.207495 kubelet[2004]: E1002 19:44:11.207482 2004 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1\": container is already in removing state" containerID="7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1" Oct 2 19:44:11.207587 kubelet[2004]: E1002 19:44:11.207504 2004 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1": container is already in removing state; Skipping pod "cilium-kxckk_kube-system(d4c1fe27-4805-4e1f-85d2-b378fe202268)" Oct 2 19:44:11.207587 kubelet[2004]: E1002 19:44:11.207547 2004 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:11.207722 kubelet[2004]: E1002 19:44:11.207709 2004 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-kxckk_kube-system(d4c1fe27-4805-4e1f-85d2-b378fe202268)\"" pod="kube-system/cilium-kxckk" podUID=d4c1fe27-4805-4e1f-85d2-b378fe202268 Oct 2 19:44:11.211098 env[1098]: time="2023-10-02T19:44:11.211027595Z" level=info msg="RemoveContainer for \"7b770e076ed66500108bda1b7978340bd4dbc448c85519a37f505c0a0cfb86d1\" returns successfully" Oct 2 19:44:11.481798 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4-rootfs.mount: Deactivated successfully. Oct 2 19:44:13.301403 env[1098]: time="2023-10-02T19:44:13.301340373Z" level=info msg="StopPodSandbox for \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\"" Oct 2 19:44:13.301790 env[1098]: time="2023-10-02T19:44:13.301425977Z" level=info msg="Container to stop \"245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:44:13.303173 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f-shm.mount: Deactivated successfully. Oct 2 19:44:13.308000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:44:13.309764 systemd[1]: cri-containerd-a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f.scope: Deactivated successfully. Oct 2 19:44:13.313000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:44:13.329674 sshd[3086]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:13.329000 audit[3086]: USER_END pid=3086 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:13.329000 audit[3086]: CRED_DISP pid=3086 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:13.331999 systemd[1]: sshd@29-10.0.0.10:22-10.0.0.1:42800.service: Deactivated successfully. Oct 2 19:44:13.332817 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:44:13.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.10:22-10.0.0.1:42800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:13.333461 systemd-logind[1087]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:44:13.334335 systemd-logind[1087]: Removed session 30. Oct 2 19:44:13.337662 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f-rootfs.mount: Deactivated successfully. Oct 2 19:44:13.347105 env[1098]: time="2023-10-02T19:44:13.347047903Z" level=info msg="shim disconnected" id=a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f Oct 2 19:44:13.347375 env[1098]: time="2023-10-02T19:44:13.347352275Z" level=warning msg="cleaning up after shim disconnected" id=a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f namespace=k8s.io Oct 2 19:44:13.347760 env[1098]: time="2023-10-02T19:44:13.347442989Z" level=info msg="cleaning up dead shim" Oct 2 19:44:13.353927 env[1098]: time="2023-10-02T19:44:13.353877687Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:44:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3312 runtime=io.containerd.runc.v2\n" Oct 2 19:44:13.354271 env[1098]: time="2023-10-02T19:44:13.354242946Z" level=info msg="TearDown network for sandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" successfully" Oct 2 19:44:13.354329 env[1098]: time="2023-10-02T19:44:13.354273305Z" level=info msg="StopPodSandbox for \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" returns successfully" Oct 2 19:44:13.421220 kubelet[2004]: I1002 19:44:13.421190 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-host-proc-sys-kernel\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421234 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-cni-path\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421249 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-xtables-lock\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421262 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-hostproc\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421282 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-8h6v4\" (UniqueName: \"kubernetes.io/projected/d4c1fe27-4805-4e1f-85d2-b378fe202268-kube-api-access-8h6v4\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421296 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-cgroup\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421312 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-host-proc-sys-net\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421312 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421312 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-cni-path" (OuterVolumeSpecName: "cni-path") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421329 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d4c1fe27-4805-4e1f-85d2-b378fe202268-clustermesh-secrets\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421348 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-config-path\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421347 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421364 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d4c1fe27-4805-4e1f-85d2-b378fe202268-hubble-tls\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421362 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421378 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-lib-modules\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.421624 kubelet[2004]: I1002 19:44:13.421394 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-run\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421412 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-bpf-maps\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421426 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-etc-cni-netd\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421441 2004 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-ipsec-secrets\") pod \"d4c1fe27-4805-4e1f-85d2-b378fe202268\" (UID: \"d4c1fe27-4805-4e1f-85d2-b378fe202268\") " Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421466 2004 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421476 2004 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421484 2004 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421492 2004 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421568 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421582 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421591 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-hostproc" (OuterVolumeSpecName: "hostproc") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421610 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421618 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:13.422209 kubelet[2004]: I1002 19:44:13.421627 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:13.422209 kubelet[2004]: W1002 19:44:13.421674 2004 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/d4c1fe27-4805-4e1f-85d2-b378fe202268/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:44:13.423242 kubelet[2004]: I1002 19:44:13.423226 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:44:13.424056 kubelet[2004]: I1002 19:44:13.423828 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d4c1fe27-4805-4e1f-85d2-b378fe202268-kube-api-access-8h6v4" (OuterVolumeSpecName: "kube-api-access-8h6v4") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "kube-api-access-8h6v4". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:44:13.424056 kubelet[2004]: I1002 19:44:13.423946 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d4c1fe27-4805-4e1f-85d2-b378fe202268-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:44:13.425590 kubelet[2004]: I1002 19:44:13.425567 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:44:13.425757 kubelet[2004]: I1002 19:44:13.425735 2004 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d4c1fe27-4805-4e1f-85d2-b378fe202268-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "d4c1fe27-4805-4e1f-85d2-b378fe202268" (UID: "d4c1fe27-4805-4e1f-85d2-b378fe202268"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:44:13.426165 systemd[1]: var-lib-kubelet-pods-d4c1fe27\x2d4805\x2d4e1f\x2d85d2\x2db378fe202268-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:44:13.426258 systemd[1]: var-lib-kubelet-pods-d4c1fe27\x2d4805\x2d4e1f\x2d85d2\x2db378fe202268-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:44:13.426304 systemd[1]: var-lib-kubelet-pods-d4c1fe27\x2d4805\x2d4e1f\x2d85d2\x2db378fe202268-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d8h6v4.mount: Deactivated successfully. Oct 2 19:44:13.427847 systemd[1]: var-lib-kubelet-pods-d4c1fe27\x2d4805\x2d4e1f\x2d85d2\x2db378fe202268-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:44:13.522301 kubelet[2004]: I1002 19:44:13.522256 2004 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.522301 kubelet[2004]: I1002 19:44:13.522287 2004 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.522301 kubelet[2004]: I1002 19:44:13.522301 2004 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.522301 kubelet[2004]: I1002 19:44:13.522310 2004 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.522519 kubelet[2004]: I1002 19:44:13.522318 2004 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.522519 kubelet[2004]: I1002 19:44:13.522331 2004 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-8h6v4\" (UniqueName: \"kubernetes.io/projected/d4c1fe27-4805-4e1f-85d2-b378fe202268-kube-api-access-8h6v4\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.522519 kubelet[2004]: I1002 19:44:13.522339 2004 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.522519 kubelet[2004]: I1002 19:44:13.522348 2004 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d4c1fe27-4805-4e1f-85d2-b378fe202268-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.522519 kubelet[2004]: I1002 19:44:13.522358 2004 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d4c1fe27-4805-4e1f-85d2-b378fe202268-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.522519 kubelet[2004]: I1002 19:44:13.522366 2004 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d4c1fe27-4805-4e1f-85d2-b378fe202268-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.522519 kubelet[2004]: I1002 19:44:13.522375 2004 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d4c1fe27-4805-4e1f-85d2-b378fe202268-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:44:13.624128 kubelet[2004]: W1002 19:44:13.623992 2004 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd4c1fe27_4805_4e1f_85d2_b378fe202268.slice/cri-containerd-245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4.scope WatchSource:0}: task 245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4 not found: not found Oct 2 19:44:14.212693 kubelet[2004]: I1002 19:44:14.212666 2004 scope.go:115] "RemoveContainer" containerID="245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4" Oct 2 19:44:14.214209 env[1098]: time="2023-10-02T19:44:14.214165493Z" level=info msg="RemoveContainer for \"245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4\"" Oct 2 19:44:14.216657 systemd[1]: Removed slice kubepods-burstable-podd4c1fe27_4805_4e1f_85d2_b378fe202268.slice. Oct 2 19:44:14.217289 env[1098]: time="2023-10-02T19:44:14.217252783Z" level=info msg="RemoveContainer for \"245d50e93211ebe73dd59a6f787920e87c87f9e3e8a1c28410a97bff7c5b37e4\" returns successfully" Oct 2 19:44:14.464138 env[1098]: time="2023-10-02T19:44:14.464043506Z" level=info msg="StopPodSandbox for \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\"" Oct 2 19:44:14.464553 env[1098]: time="2023-10-02T19:44:14.464491303Z" level=info msg="TearDown network for sandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" successfully" Oct 2 19:44:14.464553 env[1098]: time="2023-10-02T19:44:14.464539615Z" level=info msg="StopPodSandbox for \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" returns successfully" Oct 2 19:44:14.465148 env[1098]: time="2023-10-02T19:44:14.465120417Z" level=info msg="RemovePodSandbox for \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\"" Oct 2 19:44:14.465212 env[1098]: time="2023-10-02T19:44:14.465144934Z" level=info msg="Forcibly stopping sandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\"" Oct 2 19:44:14.465212 env[1098]: time="2023-10-02T19:44:14.465190502Z" level=info msg="TearDown network for sandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" successfully" Oct 2 19:44:14.475328 kubelet[2004]: I1002 19:44:14.475299 2004 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=d4c1fe27-4805-4e1f-85d2-b378fe202268 path="/var/lib/kubelet/pods/d4c1fe27-4805-4e1f-85d2-b378fe202268/volumes" Oct 2 19:44:14.487265 env[1098]: time="2023-10-02T19:44:14.487236391Z" level=info msg="RemovePodSandbox \"a22330ffc6d179a4f121fa121871eb6334565ec7f01bd337ae58a9318a4f030f\" returns successfully" Oct 2 19:44:14.639477 kubelet[2004]: E1002 19:44:14.639452 2004 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"