Oct 2 19:10:32.770554 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:10:32.770586 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:10:32.770602 kernel: BIOS-provided physical RAM map: Oct 2 19:10:32.770611 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 19:10:32.770619 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Oct 2 19:10:32.770627 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Oct 2 19:10:32.770638 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Oct 2 19:10:32.770648 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Oct 2 19:10:32.770656 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Oct 2 19:10:32.770667 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Oct 2 19:10:32.770676 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Oct 2 19:10:32.770685 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Oct 2 19:10:32.770694 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Oct 2 19:10:32.770703 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Oct 2 19:10:32.770714 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Oct 2 19:10:32.770725 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Oct 2 19:10:32.770735 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Oct 2 19:10:32.770744 kernel: NX (Execute Disable) protection: active Oct 2 19:10:32.770754 kernel: e820: update [mem 0x9b3f7018-0x9b400c57] usable ==> usable Oct 2 19:10:32.770763 kernel: e820: update [mem 0x9b3f7018-0x9b400c57] usable ==> usable Oct 2 19:10:32.770773 kernel: e820: update [mem 0x9b1aa018-0x9b1e6e57] usable ==> usable Oct 2 19:10:32.770782 kernel: e820: update [mem 0x9b1aa018-0x9b1e6e57] usable ==> usable Oct 2 19:10:32.770791 kernel: extended physical RAM map: Oct 2 19:10:32.770801 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 19:10:32.770811 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Oct 2 19:10:32.770822 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Oct 2 19:10:32.770832 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Oct 2 19:10:32.770841 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Oct 2 19:10:32.770851 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Oct 2 19:10:32.770860 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Oct 2 19:10:32.770870 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b1aa017] usable Oct 2 19:10:32.770879 kernel: reserve setup_data: [mem 0x000000009b1aa018-0x000000009b1e6e57] usable Oct 2 19:10:32.770888 kernel: reserve setup_data: [mem 0x000000009b1e6e58-0x000000009b3f7017] usable Oct 2 19:10:32.770898 kernel: reserve setup_data: [mem 0x000000009b3f7018-0x000000009b400c57] usable Oct 2 19:10:32.770907 kernel: reserve setup_data: [mem 0x000000009b400c58-0x000000009c8eefff] usable Oct 2 19:10:32.770917 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Oct 2 19:10:32.770928 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Oct 2 19:10:32.770938 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Oct 2 19:10:32.770947 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Oct 2 19:10:32.770957 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Oct 2 19:10:32.770971 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Oct 2 19:10:32.770981 kernel: efi: EFI v2.70 by EDK II Oct 2 19:10:32.770991 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b773018 RNG=0x9cb75018 Oct 2 19:10:32.771003 kernel: random: crng init done Oct 2 19:10:32.771013 kernel: SMBIOS 2.8 present. Oct 2 19:10:32.771023 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 0.0.0 02/06/2015 Oct 2 19:10:32.771034 kernel: Hypervisor detected: KVM Oct 2 19:10:32.771044 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:10:32.771054 kernel: kvm-clock: cpu 0, msr 4df8a001, primary cpu clock Oct 2 19:10:32.771065 kernel: kvm-clock: using sched offset of 3944039450 cycles Oct 2 19:10:32.771076 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:10:32.771086 kernel: tsc: Detected 2794.748 MHz processor Oct 2 19:10:32.771101 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:10:32.771112 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:10:32.771125 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Oct 2 19:10:32.771136 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:10:32.771146 kernel: Using GB pages for direct mapping Oct 2 19:10:32.771156 kernel: Secure boot disabled Oct 2 19:10:32.771167 kernel: ACPI: Early table checksum verification disabled Oct 2 19:10:32.771177 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Oct 2 19:10:32.771188 kernel: ACPI: XSDT 0x000000009CB7D0E8 00004C (v01 BOCHS BXPC 00000001 01000013) Oct 2 19:10:32.771200 kernel: ACPI: FACP 0x000000009CB7A000 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:10:32.771210 kernel: ACPI: DSDT 0x000000009CB7B000 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:10:32.771221 kernel: ACPI: FACS 0x000000009CBDD000 000040 Oct 2 19:10:32.771231 kernel: ACPI: APIC 0x000000009CB79000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:10:32.771242 kernel: ACPI: HPET 0x000000009CB78000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:10:32.771252 kernel: ACPI: WAET 0x000000009CB77000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:10:32.771262 kernel: ACPI: BGRT 0x000000009CB76000 000038 (v01 INTEL EDK2 00000002 01000013) Oct 2 19:10:32.771273 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb7a000-0x9cb7a073] Oct 2 19:10:32.771283 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7b000-0x9cb7ca38] Oct 2 19:10:32.771296 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Oct 2 19:10:32.771306 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb79000-0x9cb7908f] Oct 2 19:10:32.771317 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb78000-0x9cb78037] Oct 2 19:10:32.771327 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb77000-0x9cb77027] Oct 2 19:10:32.771337 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb76000-0x9cb76037] Oct 2 19:10:32.771348 kernel: No NUMA configuration found Oct 2 19:10:32.771358 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Oct 2 19:10:32.771382 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Oct 2 19:10:32.771393 kernel: Zone ranges: Oct 2 19:10:32.771409 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:10:32.771419 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Oct 2 19:10:32.771429 kernel: Normal empty Oct 2 19:10:32.771439 kernel: Movable zone start for each node Oct 2 19:10:32.771450 kernel: Early memory node ranges Oct 2 19:10:32.771460 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 19:10:32.771470 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Oct 2 19:10:32.771481 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Oct 2 19:10:32.771491 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Oct 2 19:10:32.771503 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Oct 2 19:10:32.771513 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Oct 2 19:10:32.771524 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Oct 2 19:10:32.771534 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:10:32.771545 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 19:10:32.771555 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Oct 2 19:10:32.771566 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:10:32.771576 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Oct 2 19:10:32.771594 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Oct 2 19:10:32.771607 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Oct 2 19:10:32.771617 kernel: ACPI: PM-Timer IO Port: 0xb008 Oct 2 19:10:32.771627 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:10:32.771638 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:10:32.771648 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:10:32.771659 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:10:32.771669 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:10:32.771680 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:10:32.771690 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:10:32.771702 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:10:32.771713 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:10:32.771723 kernel: TSC deadline timer available Oct 2 19:10:32.771733 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Oct 2 19:10:32.771743 kernel: kvm-guest: KVM setup pv remote TLB flush Oct 2 19:10:32.771754 kernel: kvm-guest: setup PV sched yield Oct 2 19:10:32.771764 kernel: [mem 0x9d000000-0xffffffff] available for PCI devices Oct 2 19:10:32.771775 kernel: Booting paravirtualized kernel on KVM Oct 2 19:10:32.771785 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:10:32.771796 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Oct 2 19:10:32.771808 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u524288 Oct 2 19:10:32.771819 kernel: pcpu-alloc: s185624 r8192 d31464 u524288 alloc=1*2097152 Oct 2 19:10:32.771836 kernel: pcpu-alloc: [0] 0 1 2 3 Oct 2 19:10:32.771848 kernel: kvm-guest: setup async PF for cpu 0 Oct 2 19:10:32.771859 kernel: kvm-guest: stealtime: cpu 0, msr 9ae1c0c0 Oct 2 19:10:32.771870 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:10:32.771881 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:10:32.771892 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Oct 2 19:10:32.771903 kernel: Policy zone: DMA32 Oct 2 19:10:32.771915 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:10:32.771927 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:10:32.771940 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:10:32.771951 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:10:32.771962 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:10:32.771973 kernel: Memory: 2400436K/2567000K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 166304K reserved, 0K cma-reserved) Oct 2 19:10:32.771985 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:10:32.771997 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:10:32.772008 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:10:32.772019 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:10:32.772031 kernel: rcu: RCU event tracing is enabled. Oct 2 19:10:32.772042 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:10:32.772053 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:10:32.772064 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:10:32.772075 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:10:32.772086 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:10:32.772099 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Oct 2 19:10:32.772110 kernel: Console: colour dummy device 80x25 Oct 2 19:10:32.772121 kernel: printk: console [ttyS0] enabled Oct 2 19:10:32.772132 kernel: ACPI: Core revision 20210730 Oct 2 19:10:32.772143 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Oct 2 19:10:32.772154 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:10:32.772165 kernel: x2apic enabled Oct 2 19:10:32.772176 kernel: Switched APIC routing to physical x2apic. Oct 2 19:10:32.772187 kernel: kvm-guest: setup PV IPIs Oct 2 19:10:32.772200 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 19:10:32.772211 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 19:10:32.772222 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Oct 2 19:10:32.772233 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Oct 2 19:10:32.772244 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Oct 2 19:10:32.772255 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Oct 2 19:10:32.772266 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:10:32.772277 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:10:32.772288 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:10:32.772301 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:10:32.772312 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Oct 2 19:10:32.772323 kernel: RETBleed: Mitigation: untrained return thunk Oct 2 19:10:32.772334 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Oct 2 19:10:32.772345 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Oct 2 19:10:32.772356 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:10:32.772378 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:10:32.772389 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:10:32.772403 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:10:32.772414 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Oct 2 19:10:32.772425 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:10:32.772436 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:10:32.772447 kernel: LSM: Security Framework initializing Oct 2 19:10:32.772457 kernel: SELinux: Initializing. Oct 2 19:10:32.772468 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:10:32.772480 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:10:32.772490 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Oct 2 19:10:32.772504 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Oct 2 19:10:32.772514 kernel: ... version: 0 Oct 2 19:10:32.772525 kernel: ... bit width: 48 Oct 2 19:10:32.772536 kernel: ... generic registers: 6 Oct 2 19:10:32.772547 kernel: ... value mask: 0000ffffffffffff Oct 2 19:10:32.772558 kernel: ... max period: 00007fffffffffff Oct 2 19:10:32.772569 kernel: ... fixed-purpose events: 0 Oct 2 19:10:32.772584 kernel: ... event mask: 000000000000003f Oct 2 19:10:32.772595 kernel: signal: max sigframe size: 1776 Oct 2 19:10:32.772606 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:10:32.772619 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:10:32.772630 kernel: x86: Booting SMP configuration: Oct 2 19:10:32.772641 kernel: .... node #0, CPUs: #1 Oct 2 19:10:32.772652 kernel: kvm-clock: cpu 1, msr 4df8a041, secondary cpu clock Oct 2 19:10:32.772663 kernel: kvm-guest: setup async PF for cpu 1 Oct 2 19:10:32.772673 kernel: kvm-guest: stealtime: cpu 1, msr 9ae9c0c0 Oct 2 19:10:32.772684 kernel: #2 Oct 2 19:10:32.772695 kernel: kvm-clock: cpu 2, msr 4df8a081, secondary cpu clock Oct 2 19:10:32.772706 kernel: kvm-guest: setup async PF for cpu 2 Oct 2 19:10:32.772719 kernel: kvm-guest: stealtime: cpu 2, msr 9af1c0c0 Oct 2 19:10:32.772730 kernel: #3 Oct 2 19:10:32.772740 kernel: kvm-clock: cpu 3, msr 4df8a0c1, secondary cpu clock Oct 2 19:10:32.772751 kernel: kvm-guest: setup async PF for cpu 3 Oct 2 19:10:32.772762 kernel: kvm-guest: stealtime: cpu 3, msr 9af9c0c0 Oct 2 19:10:32.772773 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:10:32.772784 kernel: smpboot: Max logical packages: 1 Oct 2 19:10:32.772795 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Oct 2 19:10:32.772806 kernel: devtmpfs: initialized Oct 2 19:10:32.772818 kernel: x86/mm: Memory block size: 128MB Oct 2 19:10:32.772829 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Oct 2 19:10:32.772840 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Oct 2 19:10:32.772852 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Oct 2 19:10:32.772863 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Oct 2 19:10:32.772874 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Oct 2 19:10:32.772885 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:10:32.772897 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:10:32.772908 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:10:32.772921 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:10:32.772932 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:10:32.772943 kernel: audit: type=2000 audit(1696273831.465:1): state=initialized audit_enabled=0 res=1 Oct 2 19:10:32.772954 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:10:32.772964 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:10:32.772975 kernel: cpuidle: using governor menu Oct 2 19:10:32.772986 kernel: ACPI: bus type PCI registered Oct 2 19:10:32.772998 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:10:32.773009 kernel: dca service started, version 1.12.1 Oct 2 19:10:32.773021 kernel: PCI: Using configuration type 1 for base access Oct 2 19:10:32.773032 kernel: PCI: Using configuration type 1 for extended access Oct 2 19:10:32.773044 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:10:32.773055 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:10:32.773066 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:10:32.773076 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:10:32.773087 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:10:32.773098 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:10:32.773109 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:10:32.773121 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:10:32.773132 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:10:32.773143 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:10:32.773154 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:10:32.773166 kernel: ACPI: Interpreter enabled Oct 2 19:10:32.773176 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 19:10:32.773187 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:10:32.773198 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:10:32.773209 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 19:10:32.773222 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:10:32.773396 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:10:32.773414 kernel: acpiphp: Slot [3] registered Oct 2 19:10:32.773426 kernel: acpiphp: Slot [4] registered Oct 2 19:10:32.773437 kernel: acpiphp: Slot [5] registered Oct 2 19:10:32.773447 kernel: acpiphp: Slot [6] registered Oct 2 19:10:32.773458 kernel: acpiphp: Slot [7] registered Oct 2 19:10:32.773469 kernel: acpiphp: Slot [8] registered Oct 2 19:10:32.773480 kernel: acpiphp: Slot [9] registered Oct 2 19:10:32.773493 kernel: acpiphp: Slot [10] registered Oct 2 19:10:32.773504 kernel: acpiphp: Slot [11] registered Oct 2 19:10:32.773515 kernel: acpiphp: Slot [12] registered Oct 2 19:10:32.773526 kernel: acpiphp: Slot [13] registered Oct 2 19:10:32.773537 kernel: acpiphp: Slot [14] registered Oct 2 19:10:32.773548 kernel: acpiphp: Slot [15] registered Oct 2 19:10:32.773558 kernel: acpiphp: Slot [16] registered Oct 2 19:10:32.773569 kernel: acpiphp: Slot [17] registered Oct 2 19:10:32.773585 kernel: acpiphp: Slot [18] registered Oct 2 19:10:32.773595 kernel: acpiphp: Slot [19] registered Oct 2 19:10:32.773603 kernel: acpiphp: Slot [20] registered Oct 2 19:10:32.773611 kernel: acpiphp: Slot [21] registered Oct 2 19:10:32.773619 kernel: acpiphp: Slot [22] registered Oct 2 19:10:32.773628 kernel: acpiphp: Slot [23] registered Oct 2 19:10:32.773638 kernel: acpiphp: Slot [24] registered Oct 2 19:10:32.773648 kernel: acpiphp: Slot [25] registered Oct 2 19:10:32.773659 kernel: acpiphp: Slot [26] registered Oct 2 19:10:32.773670 kernel: acpiphp: Slot [27] registered Oct 2 19:10:32.773681 kernel: acpiphp: Slot [28] registered Oct 2 19:10:32.773694 kernel: acpiphp: Slot [29] registered Oct 2 19:10:32.773705 kernel: acpiphp: Slot [30] registered Oct 2 19:10:32.773715 kernel: acpiphp: Slot [31] registered Oct 2 19:10:32.773726 kernel: PCI host bridge to bus 0000:00 Oct 2 19:10:32.773846 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:10:32.773943 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:10:32.774037 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:10:32.774137 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Oct 2 19:10:32.774249 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0x87fffffff window] Oct 2 19:10:32.774343 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:10:32.774511 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:10:32.774667 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:10:32.774823 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 19:10:32.774947 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Oct 2 19:10:32.775072 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 19:10:32.775192 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 19:10:32.775312 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 19:10:32.775433 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 19:10:32.775587 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 19:10:32.775715 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Oct 2 19:10:32.775854 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Oct 2 19:10:32.776011 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Oct 2 19:10:32.776150 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Oct 2 19:10:32.776286 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xc1043000-0xc1043fff] Oct 2 19:10:32.776454 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Oct 2 19:10:32.776643 kernel: pci 0000:00:02.0: BAR 0: assigned to efifb Oct 2 19:10:32.776785 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:10:32.776912 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:10:32.777019 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc0a0-0xc0bf] Oct 2 19:10:32.777131 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Oct 2 19:10:32.777238 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Oct 2 19:10:32.777352 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 19:10:32.777484 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 19:10:32.777600 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Oct 2 19:10:32.777712 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Oct 2 19:10:32.777826 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Oct 2 19:10:32.777932 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc080-0xc09f] Oct 2 19:10:32.778035 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xc1040000-0xc1040fff] Oct 2 19:10:32.778140 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Oct 2 19:10:32.778244 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Oct 2 19:10:32.778259 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:10:32.778273 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:10:32.778284 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:10:32.778295 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:10:32.778306 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:10:32.778317 kernel: iommu: Default domain type: Translated Oct 2 19:10:32.778328 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:10:32.778520 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 19:10:32.778636 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:10:32.778739 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 19:10:32.778757 kernel: vgaarb: loaded Oct 2 19:10:32.778768 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:10:32.778780 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:10:32.778791 kernel: PTP clock support registered Oct 2 19:10:32.778802 kernel: Registered efivars operations Oct 2 19:10:32.778813 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:10:32.778824 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:10:32.778835 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Oct 2 19:10:32.778845 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Oct 2 19:10:32.778858 kernel: e820: reserve RAM buffer [mem 0x9b1aa018-0x9bffffff] Oct 2 19:10:32.778869 kernel: e820: reserve RAM buffer [mem 0x9b3f7018-0x9bffffff] Oct 2 19:10:32.778880 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Oct 2 19:10:32.778891 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Oct 2 19:10:32.778902 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Oct 2 19:10:32.778913 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Oct 2 19:10:32.778924 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:10:32.778935 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:10:32.778946 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:10:32.778960 kernel: pnp: PnP ACPI init Oct 2 19:10:32.779067 kernel: pnp 00:02: [dma 2] Oct 2 19:10:32.779084 kernel: pnp: PnP ACPI: found 6 devices Oct 2 19:10:32.779095 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:10:32.779107 kernel: NET: Registered PF_INET protocol family Oct 2 19:10:32.779118 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:10:32.779129 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:10:32.779140 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:10:32.779154 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:10:32.779165 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:10:32.779176 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:10:32.779187 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:10:32.779198 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:10:32.779209 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:10:32.779220 kernel: NET: Registered PF_XDP protocol family Oct 2 19:10:32.779325 kernel: pci 0000:00:05.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Oct 2 19:10:32.779465 kernel: pci 0000:00:05.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Oct 2 19:10:32.779564 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:10:32.779669 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:10:32.779764 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:10:32.779858 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Oct 2 19:10:32.779951 kernel: pci_bus 0000:00: resource 8 [mem 0x800000000-0x87fffffff window] Oct 2 19:10:32.780055 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 19:10:32.780162 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:10:32.780270 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:10:32.780285 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:10:32.780297 kernel: Initialise system trusted keyrings Oct 2 19:10:32.780309 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:10:32.780320 kernel: Key type asymmetric registered Oct 2 19:10:32.780332 kernel: Asymmetric key parser 'x509' registered Oct 2 19:10:32.780344 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:10:32.780355 kernel: io scheduler mq-deadline registered Oct 2 19:10:32.780430 kernel: io scheduler kyber registered Oct 2 19:10:32.780445 kernel: io scheduler bfq registered Oct 2 19:10:32.780457 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:10:32.780469 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 19:10:32.780481 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Oct 2 19:10:32.780493 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 19:10:32.780505 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:10:32.780516 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:10:32.780528 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:10:32.780540 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:10:32.780553 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:10:32.780565 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:10:32.780691 kernel: rtc_cmos 00:05: RTC can wake from S4 Oct 2 19:10:32.780787 kernel: rtc_cmos 00:05: registered as rtc0 Oct 2 19:10:32.780885 kernel: rtc_cmos 00:05: setting system clock to 2023-10-02T19:10:32 UTC (1696273832) Oct 2 19:10:32.780979 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Oct 2 19:10:32.780994 kernel: efifb: probing for efifb Oct 2 19:10:32.781006 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Oct 2 19:10:32.781018 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Oct 2 19:10:32.781029 kernel: efifb: scrolling: redraw Oct 2 19:10:32.781040 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 19:10:32.781052 kernel: Console: switching to colour frame buffer device 160x50 Oct 2 19:10:32.781063 kernel: fb0: EFI VGA frame buffer device Oct 2 19:10:32.781078 kernel: pstore: Registered efi as persistent store backend Oct 2 19:10:32.781089 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:10:32.781101 kernel: Segment Routing with IPv6 Oct 2 19:10:32.781112 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:10:32.781123 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:10:32.781135 kernel: Key type dns_resolver registered Oct 2 19:10:32.781146 kernel: IPI shorthand broadcast: enabled Oct 2 19:10:32.781158 kernel: sched_clock: Marking stable (390248897, 102490244)->(502001672, -9262531) Oct 2 19:10:32.781170 kernel: registered taskstats version 1 Oct 2 19:10:32.781181 kernel: Loading compiled-in X.509 certificates Oct 2 19:10:32.781195 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:10:32.781206 kernel: Key type .fscrypt registered Oct 2 19:10:32.781217 kernel: Key type fscrypt-provisioning registered Oct 2 19:10:32.781229 kernel: pstore: Using crash dump compression: deflate Oct 2 19:10:32.781241 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:10:32.781252 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:10:32.781263 kernel: ima: No architecture policies found Oct 2 19:10:32.781275 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:10:32.781288 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:10:32.781301 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:10:32.781313 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:10:32.781324 kernel: Run /init as init process Oct 2 19:10:32.781336 kernel: with arguments: Oct 2 19:10:32.781347 kernel: /init Oct 2 19:10:32.781358 kernel: with environment: Oct 2 19:10:32.781383 kernel: HOME=/ Oct 2 19:10:32.781394 kernel: TERM=linux Oct 2 19:10:32.781406 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:10:32.781424 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:10:32.781439 systemd[1]: Detected virtualization kvm. Oct 2 19:10:32.781452 systemd[1]: Detected architecture x86-64. Oct 2 19:10:32.781464 systemd[1]: Running in initrd. Oct 2 19:10:32.781475 systemd[1]: No hostname configured, using default hostname. Oct 2 19:10:32.781488 systemd[1]: Hostname set to . Oct 2 19:10:32.781502 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:10:32.781514 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:10:32.781526 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:10:32.781539 systemd[1]: Reached target cryptsetup.target. Oct 2 19:10:32.781551 systemd[1]: Reached target paths.target. Oct 2 19:10:32.781563 systemd[1]: Reached target slices.target. Oct 2 19:10:32.781574 systemd[1]: Reached target swap.target. Oct 2 19:10:32.781592 systemd[1]: Reached target timers.target. Oct 2 19:10:32.781608 systemd[1]: Listening on iscsid.socket. Oct 2 19:10:32.781620 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:10:32.781632 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:10:32.781645 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:10:32.781657 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:10:32.781670 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:10:32.781682 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:10:32.781694 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:10:32.781706 systemd[1]: Reached target sockets.target. Oct 2 19:10:32.781720 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:10:32.781732 systemd[1]: Finished network-cleanup.service. Oct 2 19:10:32.781745 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:10:32.781757 systemd[1]: Starting systemd-journald.service... Oct 2 19:10:32.781769 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:10:32.781782 systemd[1]: Starting systemd-resolved.service... Oct 2 19:10:32.781793 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:10:32.781806 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:10:32.781818 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:10:32.781832 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:10:32.781844 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:10:32.781856 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:10:32.781869 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:10:32.781885 systemd-journald[197]: Journal started Oct 2 19:10:32.781945 systemd-journald[197]: Runtime Journal (/run/log/journal/526601b0d64d4bc4916c28cf0f99f1cf) is 6.0M, max 48.4M, 42.4M free. Oct 2 19:10:32.763044 systemd-modules-load[198]: Inserted module 'overlay' Oct 2 19:10:32.800540 systemd[1]: Started systemd-journald.service. Oct 2 19:10:32.800567 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:10:32.801283 kernel: Bridge firewalling registered Oct 2 19:10:32.801302 kernel: audit: type=1130 audit(1696273832.795:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:32.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:32.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:32.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:32.795033 systemd-resolved[199]: Positive Trust Anchors: Oct 2 19:10:32.807170 kernel: audit: type=1130 audit(1696273832.800:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:32.807192 kernel: audit: type=1130 audit(1696273832.800:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:32.795043 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:10:32.795079 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:10:32.795500 systemd-modules-load[198]: Inserted module 'br_netfilter' Oct 2 19:10:32.824412 kernel: SCSI subsystem initialized Oct 2 19:10:32.796460 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:10:32.797802 systemd-resolved[199]: Defaulting to hostname 'linux'. Oct 2 19:10:32.826499 dracut-cmdline[215]: dracut-dracut-053 Oct 2 19:10:32.826499 dracut-cmdline[215]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Oct 2 19:10:32.826499 dracut-cmdline[215]: BEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:10:32.800564 systemd[1]: Started systemd-resolved.service. Oct 2 19:10:32.801322 systemd[1]: Reached target nss-lookup.target. Oct 2 19:10:32.806511 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:10:32.836659 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:10:32.836689 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:10:32.838087 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:10:32.840352 systemd-modules-load[198]: Inserted module 'dm_multipath' Oct 2 19:10:32.841194 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:10:32.845269 kernel: audit: type=1130 audit(1696273832.841:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:32.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:32.842779 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:10:32.850160 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:10:32.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:32.853401 kernel: audit: type=1130 audit(1696273832.850:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:32.860392 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:10:32.871404 kernel: iscsi: registered transport (tcp) Oct 2 19:10:32.890404 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:10:32.890429 kernel: QLogic iSCSI HBA Driver Oct 2 19:10:32.915569 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:10:32.919983 kernel: audit: type=1130 audit(1696273832.916:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:32.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:32.917378 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:10:32.963402 kernel: raid6: avx2x4 gen() 30789 MB/s Oct 2 19:10:32.980389 kernel: raid6: avx2x4 xor() 8077 MB/s Oct 2 19:10:32.997387 kernel: raid6: avx2x2 gen() 32343 MB/s Oct 2 19:10:33.014393 kernel: raid6: avx2x2 xor() 19122 MB/s Oct 2 19:10:33.031387 kernel: raid6: avx2x1 gen() 26437 MB/s Oct 2 19:10:33.048389 kernel: raid6: avx2x1 xor() 15165 MB/s Oct 2 19:10:33.065386 kernel: raid6: sse2x4 gen() 14778 MB/s Oct 2 19:10:33.082392 kernel: raid6: sse2x4 xor() 7514 MB/s Oct 2 19:10:33.099388 kernel: raid6: sse2x2 gen() 16349 MB/s Oct 2 19:10:33.116388 kernel: raid6: sse2x2 xor() 9780 MB/s Oct 2 19:10:33.133387 kernel: raid6: sse2x1 gen() 12527 MB/s Oct 2 19:10:33.161509 kernel: raid6: sse2x1 xor() 7737 MB/s Oct 2 19:10:33.161536 kernel: raid6: using algorithm avx2x2 gen() 32343 MB/s Oct 2 19:10:33.161550 kernel: raid6: .... xor() 19122 MB/s, rmw enabled Oct 2 19:10:33.161564 kernel: raid6: using avx2x2 recovery algorithm Oct 2 19:10:33.174397 kernel: xor: automatically using best checksumming function avx Oct 2 19:10:33.262393 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:10:33.269740 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:10:33.274975 kernel: audit: type=1130 audit(1696273833.270:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:33.274999 kernel: audit: type=1334 audit(1696273833.272:9): prog-id=7 op=LOAD Oct 2 19:10:33.275012 kernel: audit: type=1334 audit(1696273833.273:10): prog-id=8 op=LOAD Oct 2 19:10:33.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:33.272000 audit: BPF prog-id=7 op=LOAD Oct 2 19:10:33.273000 audit: BPF prog-id=8 op=LOAD Oct 2 19:10:33.273991 systemd[1]: Starting systemd-udevd.service... Oct 2 19:10:33.285580 systemd-udevd[400]: Using default interface naming scheme 'v252'. Oct 2 19:10:33.289262 systemd[1]: Started systemd-udevd.service. Oct 2 19:10:33.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:33.291611 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:10:33.300591 dracut-pre-trigger[409]: rd.md=0: removing MD RAID activation Oct 2 19:10:33.322260 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:10:33.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:33.323719 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:10:33.355321 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:10:33.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:33.383508 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:10:33.386388 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:10:33.403387 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:10:33.403486 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:10:33.403501 kernel: AES CTR mode by8 optimization enabled Oct 2 19:10:33.408394 kernel: libata version 3.00 loaded. Oct 2 19:10:33.411421 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 19:10:33.415384 kernel: scsi host0: ata_piix Oct 2 19:10:33.420380 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (451) Oct 2 19:10:33.423139 kernel: scsi host1: ata_piix Oct 2 19:10:33.423254 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Oct 2 19:10:33.423264 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Oct 2 19:10:33.423693 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:10:33.428526 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:10:33.430616 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:10:33.434434 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:10:33.437683 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:10:33.439261 systemd[1]: Starting disk-uuid.service... Oct 2 19:10:33.446396 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:10:33.451396 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:10:33.454390 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:10:33.583392 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Oct 2 19:10:33.583467 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Oct 2 19:10:33.611402 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Oct 2 19:10:33.611656 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:10:33.628453 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Oct 2 19:10:34.454403 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:10:34.454771 disk-uuid[515]: The operation has completed successfully. Oct 2 19:10:34.480086 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:10:34.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.480190 systemd[1]: Finished disk-uuid.service. Oct 2 19:10:34.488268 systemd[1]: Starting verity-setup.service... Oct 2 19:10:34.503396 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:10:34.534610 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:10:34.536874 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:10:34.538810 systemd[1]: Finished verity-setup.service. Oct 2 19:10:34.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.604447 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:10:34.604715 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:10:34.605349 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:10:34.606976 systemd[1]: Starting ignition-setup.service... Oct 2 19:10:34.608606 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:10:34.617734 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:10:34.617767 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:10:34.617777 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:10:34.626522 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:10:34.635152 systemd[1]: Finished ignition-setup.service. Oct 2 19:10:34.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.637058 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:10:34.678738 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:10:34.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.679000 audit: BPF prog-id=9 op=LOAD Oct 2 19:10:34.680568 systemd[1]: Starting systemd-networkd.service... Oct 2 19:10:34.699845 systemd-networkd[695]: lo: Link UP Oct 2 19:10:34.699852 systemd-networkd[695]: lo: Gained carrier Oct 2 19:10:34.700204 systemd-networkd[695]: Enumeration completed Oct 2 19:10:34.700388 systemd-networkd[695]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:10:34.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.701091 systemd-networkd[695]: eth0: Link UP Oct 2 19:10:34.701094 systemd-networkd[695]: eth0: Gained carrier Oct 2 19:10:34.701687 systemd[1]: Started systemd-networkd.service. Oct 2 19:10:34.702024 systemd[1]: Reached target network.target. Oct 2 19:10:34.704595 systemd[1]: Starting iscsiuio.service... Oct 2 19:10:34.709264 systemd[1]: Started iscsiuio.service. Oct 2 19:10:34.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.710463 systemd[1]: Starting iscsid.service... Oct 2 19:10:34.713231 iscsid[701]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:10:34.713231 iscsid[701]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:10:34.713231 iscsid[701]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:10:34.713231 iscsid[701]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:10:34.713231 iscsid[701]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:10:34.713231 iscsid[701]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:10:34.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.714158 systemd[1]: Started iscsid.service. Oct 2 19:10:34.715420 systemd-networkd[695]: eth0: DHCPv4 address 10.0.0.69/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:10:34.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.716673 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:10:34.726118 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:10:34.726963 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:10:34.727657 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:10:34.728434 systemd[1]: Reached target remote-fs.target. Oct 2 19:10:34.730124 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:10:34.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.737684 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:10:34.756846 ignition[623]: Ignition 2.14.0 Oct 2 19:10:34.756862 ignition[623]: Stage: fetch-offline Oct 2 19:10:34.756902 ignition[623]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:10:34.756909 ignition[623]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:10:34.757009 ignition[623]: parsed url from cmdline: "" Oct 2 19:10:34.757012 ignition[623]: no config URL provided Oct 2 19:10:34.757017 ignition[623]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:10:34.757022 ignition[623]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:10:34.757039 ignition[623]: op(1): [started] loading QEMU firmware config module Oct 2 19:10:34.757044 ignition[623]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:10:34.766689 ignition[623]: op(1): [finished] loading QEMU firmware config module Oct 2 19:10:34.795001 ignition[623]: parsing config with SHA512: 5989f22d0dfb431378950714757d06628d695fc9dcf505e5663d5e06302757438a000b61bbcb25313031891821511f92af22ea8dd7f2630a82afffe865cb611f Oct 2 19:10:34.824597 unknown[623]: fetched base config from "system" Oct 2 19:10:34.824608 unknown[623]: fetched user config from "qemu" Oct 2 19:10:34.825059 ignition[623]: fetch-offline: fetch-offline passed Oct 2 19:10:34.825115 ignition[623]: Ignition finished successfully Oct 2 19:10:34.826433 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:10:34.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.827674 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:10:34.828662 systemd[1]: Starting ignition-kargs.service... Oct 2 19:10:34.836467 ignition[718]: Ignition 2.14.0 Oct 2 19:10:34.836475 ignition[718]: Stage: kargs Oct 2 19:10:34.836561 ignition[718]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:10:34.836568 ignition[718]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:10:34.839245 ignition[718]: kargs: kargs passed Oct 2 19:10:34.839285 ignition[718]: Ignition finished successfully Oct 2 19:10:34.841079 systemd[1]: Finished ignition-kargs.service. Oct 2 19:10:34.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.842998 systemd[1]: Starting ignition-disks.service... Oct 2 19:10:34.849918 ignition[724]: Ignition 2.14.0 Oct 2 19:10:34.849926 ignition[724]: Stage: disks Oct 2 19:10:34.849998 ignition[724]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:10:34.850006 ignition[724]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:10:34.852711 ignition[724]: disks: disks passed Oct 2 19:10:34.852745 ignition[724]: Ignition finished successfully Oct 2 19:10:34.854220 systemd[1]: Finished ignition-disks.service. Oct 2 19:10:34.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.855302 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:10:34.856405 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:10:34.857384 systemd[1]: Reached target local-fs.target. Oct 2 19:10:34.858286 systemd[1]: Reached target sysinit.target. Oct 2 19:10:34.859186 systemd[1]: Reached target basic.target. Oct 2 19:10:34.860829 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:10:34.870271 systemd-fsck[732]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:10:34.874777 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:10:34.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.876715 systemd[1]: Mounting sysroot.mount... Oct 2 19:10:34.885056 systemd[1]: Mounted sysroot.mount. Oct 2 19:10:34.885974 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:10:34.885995 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:10:34.887698 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:10:34.888848 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:10:34.888879 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:10:34.889753 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:10:34.892462 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:10:34.893909 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:10:34.899265 initrd-setup-root[742]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:10:34.903258 initrd-setup-root[750]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:10:34.906289 initrd-setup-root[758]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:10:34.909252 initrd-setup-root[766]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:10:34.934081 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:10:34.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.934820 systemd[1]: Starting ignition-mount.service... Oct 2 19:10:34.936079 systemd[1]: Starting sysroot-boot.service... Oct 2 19:10:34.940598 bash[783]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:10:34.947482 ignition[785]: INFO : Ignition 2.14.0 Oct 2 19:10:34.947482 ignition[785]: INFO : Stage: mount Oct 2 19:10:34.948749 ignition[785]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:10:34.948749 ignition[785]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:10:34.948749 ignition[785]: INFO : mount: mount passed Oct 2 19:10:34.948749 ignition[785]: INFO : Ignition finished successfully Oct 2 19:10:34.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:34.949257 systemd[1]: Finished ignition-mount.service. Oct 2 19:10:34.954214 systemd[1]: Finished sysroot-boot.service. Oct 2 19:10:34.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:35.548298 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:10:35.555045 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (793) Oct 2 19:10:35.555071 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:10:35.555081 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:10:35.555565 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:10:35.558774 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:10:35.559976 systemd[1]: Starting ignition-files.service... Oct 2 19:10:35.571250 ignition[813]: INFO : Ignition 2.14.0 Oct 2 19:10:35.571250 ignition[813]: INFO : Stage: files Oct 2 19:10:35.572539 ignition[813]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:10:35.572539 ignition[813]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:10:35.574171 ignition[813]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:10:35.574171 ignition[813]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:10:35.574171 ignition[813]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:10:35.577799 ignition[813]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:10:35.577799 ignition[813]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:10:35.577799 ignition[813]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:10:35.577799 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:10:35.577799 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 19:10:35.576045 unknown[813]: wrote ssh authorized keys file for user: core Oct 2 19:10:35.749862 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:10:35.893293 ignition[813]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 19:10:35.893293 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:10:35.896425 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:10:35.896425 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:10:36.029585 systemd-networkd[695]: eth0: Gained IPv6LL Oct 2 19:10:36.154561 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:10:36.237758 ignition[813]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 19:10:36.237758 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:10:36.240945 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:10:36.240945 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:10:36.328843 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:10:36.909689 ignition[813]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: f4daad200c8378dfdc6cb69af28eaca4215f2b4a2dbdf75f29f9210171cb5683bc873fc000319022e6b3ad61175475d77190734713ba9136644394e8a8faafa1 Oct 2 19:10:36.912139 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:10:36.912139 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:10:36.912139 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:10:36.970032 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:10:38.433430 ignition[813]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: ce6ba764274162d38ac1c44e1fb1f0f835346f3afc5b508bb755b1b7d7170910f5812b0a1941b32e29d950e905bbd08ae761c87befad921db4d44969c8562e75 Oct 2 19:10:38.433430 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:10:38.436651 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:10:38.436651 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:10:38.509302 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:10:39.206589 ignition[813]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 33cf3f6e37bcee4dff7ce14ab933c605d07353d4e31446dd2b52c3f05e0b150b60e531f6069f112d8a76331322a72b593537531e62104cfc7c70cb03d46f76b3 Oct 2 19:10:39.206589 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:10:39.209581 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:10:39.209581 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:10:39.209581 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:10:39.213132 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:10:39.213132 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:10:39.213132 ignition[813]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(b): [started] processing unit "prepare-critools.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(b): op(c): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(b): op(c): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(b): [finished] processing unit "prepare-critools.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(f): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(f): op(10): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(f): op(10): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(f): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(11): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(11): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:10:39.213132 ignition[813]: INFO : files: op(12): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:10:39.234176 ignition[813]: INFO : files: op(12): op(13): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:10:39.256397 ignition[813]: INFO : files: op(12): op(13): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:10:39.257549 ignition[813]: INFO : files: op(12): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:10:39.257549 ignition[813]: INFO : files: op(14): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:10:39.257549 ignition[813]: INFO : files: op(14): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:10:39.257549 ignition[813]: INFO : files: createResultFile: createFiles: op(15): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:10:39.257549 ignition[813]: INFO : files: createResultFile: createFiles: op(15): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:10:39.257549 ignition[813]: INFO : files: files passed Oct 2 19:10:39.257549 ignition[813]: INFO : Ignition finished successfully Oct 2 19:10:39.263876 systemd[1]: Finished ignition-files.service. Oct 2 19:10:39.267460 kernel: kauditd_printk_skb: 21 callbacks suppressed Oct 2 19:10:39.267485 kernel: audit: type=1130 audit(1696273839.264:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.267509 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:10:39.268099 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:10:39.269119 systemd[1]: Starting ignition-quench.service... Oct 2 19:10:39.271567 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:10:39.271652 systemd[1]: Finished ignition-quench.service. Oct 2 19:10:39.276906 kernel: audit: type=1130 audit(1696273839.272:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.276923 kernel: audit: type=1131 audit(1696273839.272:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.279355 initrd-setup-root-after-ignition[838]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:10:39.281787 initrd-setup-root-after-ignition[840]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:10:39.283146 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:10:39.286361 kernel: audit: type=1130 audit(1696273839.282:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.283301 systemd[1]: Reached target ignition-complete.target. Oct 2 19:10:39.287579 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:10:39.298742 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:10:39.298842 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:10:39.304536 kernel: audit: type=1130 audit(1696273839.299:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.304558 kernel: audit: type=1131 audit(1696273839.299:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.299576 systemd[1]: Reached target initrd-fs.target. Oct 2 19:10:39.305053 systemd[1]: Reached target initrd.target. Oct 2 19:10:39.305582 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:10:39.306450 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:10:39.316990 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:10:39.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.318743 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:10:39.320865 kernel: audit: type=1130 audit(1696273839.317:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.327491 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:10:39.328586 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:10:39.329778 systemd[1]: Stopped target timers.target. Oct 2 19:10:39.330789 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:10:39.331441 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:10:39.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.332600 systemd[1]: Stopped target initrd.target. Oct 2 19:10:39.334644 systemd[1]: Stopped target basic.target. Oct 2 19:10:39.336220 kernel: audit: type=1131 audit(1696273839.332:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.335872 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:10:39.336869 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:10:39.337425 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:10:39.338907 systemd[1]: Stopped target remote-fs.target. Oct 2 19:10:39.339580 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:10:39.339796 systemd[1]: Stopped target sysinit.target. Oct 2 19:10:39.340006 systemd[1]: Stopped target local-fs.target. Oct 2 19:10:39.340215 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:10:39.340457 systemd[1]: Stopped target swap.target. Oct 2 19:10:39.344217 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:10:39.347548 kernel: audit: type=1131 audit(1696273839.344:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.344326 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:10:39.345283 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:10:39.351934 kernel: audit: type=1131 audit(1696273839.348:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.348218 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:10:39.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.348336 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:10:39.349256 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:10:39.349339 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:10:39.352069 systemd[1]: Stopped target paths.target. Oct 2 19:10:39.353087 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:10:39.356422 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:10:39.357704 systemd[1]: Stopped target slices.target. Oct 2 19:10:39.358313 systemd[1]: Stopped target sockets.target. Oct 2 19:10:39.359228 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:10:39.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.359325 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:10:39.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.360328 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:10:39.360438 systemd[1]: Stopped ignition-files.service. Oct 2 19:10:39.363976 iscsid[701]: iscsid shutting down. Oct 2 19:10:39.362382 systemd[1]: Stopping ignition-mount.service... Oct 2 19:10:39.363290 systemd[1]: Stopping iscsid.service... Oct 2 19:10:39.364884 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:10:39.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.365608 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:10:39.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.365829 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:10:39.366905 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:10:39.367063 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:10:39.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.370968 ignition[853]: INFO : Ignition 2.14.0 Oct 2 19:10:39.370968 ignition[853]: INFO : Stage: umount Oct 2 19:10:39.370968 ignition[853]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:10:39.370968 ignition[853]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:10:39.370968 ignition[853]: INFO : umount: umount passed Oct 2 19:10:39.370968 ignition[853]: INFO : Ignition finished successfully Oct 2 19:10:39.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.372000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.373000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.369525 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:10:39.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.369602 systemd[1]: Stopped iscsid.service. Oct 2 19:10:39.371820 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:10:39.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.371914 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:10:39.372978 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:10:39.373063 systemd[1]: Stopped ignition-mount.service. Oct 2 19:10:39.374826 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:10:39.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.374862 systemd[1]: Closed iscsid.socket. Oct 2 19:10:39.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.375740 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:10:39.375782 systemd[1]: Stopped ignition-disks.service. Oct 2 19:10:39.376860 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:10:39.376901 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:10:39.378118 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:10:39.378159 systemd[1]: Stopped ignition-setup.service. Oct 2 19:10:39.379213 systemd[1]: Stopping iscsiuio.service... Oct 2 19:10:39.381244 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:10:39.381861 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:10:39.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.381928 systemd[1]: Stopped iscsiuio.service. Oct 2 19:10:39.382819 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:10:39.382895 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:10:39.383609 systemd[1]: Stopped target network.target. Oct 2 19:10:39.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.383665 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:10:39.397000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.383689 systemd[1]: Closed iscsiuio.socket. Oct 2 19:10:39.383764 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:10:39.383792 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:10:39.383961 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:10:39.384304 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:10:39.389448 systemd-networkd[695]: eth0: DHCPv6 lease lost Oct 2 19:10:39.402000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:10:39.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.390484 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:10:39.390576 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:10:39.392472 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:10:39.405000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:10:39.392501 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:10:39.393830 systemd[1]: Stopping network-cleanup.service... Oct 2 19:10:39.394515 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:10:39.394551 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:10:39.395701 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:10:39.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.395742 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:10:39.396749 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:10:39.396792 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:10:39.397963 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:10:39.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.402314 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:10:39.402768 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:10:39.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.402842 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:10:39.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.407798 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:10:39.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.407924 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:10:39.408941 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:10:39.409007 systemd[1]: Stopped network-cleanup.service. Oct 2 19:10:39.410078 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:10:39.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.410110 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:10:39.411072 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:10:39.411099 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:10:39.412192 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:10:39.412221 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:10:39.413213 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:10:39.413241 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:10:39.414202 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:10:39.414234 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:10:39.416080 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:10:39.416721 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:10:39.416761 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:10:39.417496 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:10:39.417525 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:10:39.418490 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:10:39.418520 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:10:39.419863 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:10:39.420852 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:10:39.420914 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:10:39.421977 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:10:39.423646 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:10:39.438479 systemd[1]: Switching root. Oct 2 19:10:39.454585 systemd-journald[197]: Journal stopped Oct 2 19:10:42.555251 systemd-journald[197]: Received SIGTERM from PID 1 (n/a). Oct 2 19:10:42.555315 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:10:42.555342 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:10:42.555355 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:10:42.555405 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:10:42.555421 kernel: SELinux: policy capability open_perms=1 Oct 2 19:10:42.555435 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:10:42.555447 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:10:42.555464 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:10:42.555477 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:10:42.555489 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:10:42.555502 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:10:42.555515 systemd[1]: Successfully loaded SELinux policy in 37.387ms. Oct 2 19:10:42.555546 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.236ms. Oct 2 19:10:42.555565 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:10:42.555581 systemd[1]: Detected virtualization kvm. Oct 2 19:10:42.555594 systemd[1]: Detected architecture x86-64. Oct 2 19:10:42.555607 systemd[1]: Detected first boot. Oct 2 19:10:42.555621 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:10:42.555634 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:10:42.555648 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:10:42.555663 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:10:42.555679 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:10:42.555693 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:10:42.555707 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:10:42.555721 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:10:42.555734 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:10:42.555747 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:10:42.555761 systemd[1]: Created slice system-getty.slice. Oct 2 19:10:42.555777 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:10:42.555791 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:10:42.555804 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:10:42.555818 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:10:42.555831 systemd[1]: Created slice user.slice. Oct 2 19:10:42.555844 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:10:42.555857 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:10:42.555870 systemd[1]: Set up automount boot.automount. Oct 2 19:10:42.555883 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:10:42.555898 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:10:42.555911 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:10:42.555925 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:10:42.555938 systemd[1]: Reached target integritysetup.target. Oct 2 19:10:42.555951 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:10:42.555965 systemd[1]: Reached target remote-fs.target. Oct 2 19:10:42.555978 systemd[1]: Reached target slices.target. Oct 2 19:10:42.555991 systemd[1]: Reached target swap.target. Oct 2 19:10:42.556006 systemd[1]: Reached target torcx.target. Oct 2 19:10:42.556019 systemd[1]: Reached target veritysetup.target. Oct 2 19:10:42.556033 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:10:42.556046 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:10:42.556059 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:10:42.556072 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:10:42.556085 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:10:42.556098 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:10:42.556112 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:10:42.556129 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:10:42.556143 systemd[1]: Mounting media.mount... Oct 2 19:10:42.556157 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:10:42.556170 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:10:42.556183 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:10:42.556196 systemd[1]: Mounting tmp.mount... Oct 2 19:10:42.556210 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:10:42.556223 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:10:42.556237 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:10:42.556254 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:10:42.556267 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:10:42.556280 systemd[1]: Starting modprobe@drm.service... Oct 2 19:10:42.556294 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:10:42.556307 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:10:42.556320 systemd[1]: Starting modprobe@loop.service... Oct 2 19:10:42.556341 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:10:42.556355 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:10:42.556380 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:10:42.556396 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:10:42.556410 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:10:42.556423 kernel: loop: module loaded Oct 2 19:10:42.556437 kernel: fuse: init (API version 7.34) Oct 2 19:10:42.556450 systemd[1]: Stopped systemd-journald.service. Oct 2 19:10:42.556463 systemd[1]: Starting systemd-journald.service... Oct 2 19:10:42.556476 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:10:42.556489 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:10:42.556503 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:10:42.556519 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:10:42.556532 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:10:42.556545 systemd[1]: Stopped verity-setup.service. Oct 2 19:10:42.556559 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:10:42.556572 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:10:42.556585 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:10:42.556599 systemd[1]: Mounted media.mount. Oct 2 19:10:42.556615 systemd-journald[972]: Journal started Oct 2 19:10:42.556660 systemd-journald[972]: Runtime Journal (/run/log/journal/526601b0d64d4bc4916c28cf0f99f1cf) is 6.0M, max 48.4M, 42.4M free. Oct 2 19:10:39.525000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:10:39.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:10:39.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:10:39.922000 audit: BPF prog-id=10 op=LOAD Oct 2 19:10:39.922000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:10:39.922000 audit: BPF prog-id=11 op=LOAD Oct 2 19:10:39.922000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:10:42.421000 audit: BPF prog-id=12 op=LOAD Oct 2 19:10:42.421000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:10:42.421000 audit: BPF prog-id=13 op=LOAD Oct 2 19:10:42.421000 audit: BPF prog-id=14 op=LOAD Oct 2 19:10:42.421000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:10:42.421000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:10:42.422000 audit: BPF prog-id=15 op=LOAD Oct 2 19:10:42.422000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:10:42.422000 audit: BPF prog-id=16 op=LOAD Oct 2 19:10:42.422000 audit: BPF prog-id=17 op=LOAD Oct 2 19:10:42.422000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:10:42.422000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:10:42.423000 audit: BPF prog-id=18 op=LOAD Oct 2 19:10:42.423000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:10:42.423000 audit: BPF prog-id=19 op=LOAD Oct 2 19:10:42.423000 audit: BPF prog-id=20 op=LOAD Oct 2 19:10:42.423000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:10:42.423000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:10:42.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.436000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:10:42.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.531000 audit: BPF prog-id=21 op=LOAD Oct 2 19:10:42.531000 audit: BPF prog-id=22 op=LOAD Oct 2 19:10:42.531000 audit: BPF prog-id=23 op=LOAD Oct 2 19:10:42.531000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:10:42.531000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:10:42.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.547000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:10:42.547000 audit[972]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7fff8dc7bef0 a2=4000 a3=7fff8dc7bf8c items=0 ppid=1 pid=972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:42.547000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:10:39.982630 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:10:42.420543 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:10:39.982911 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:10:42.420554 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:10:39.982927 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:10:42.424297 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:10:39.982953 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:10:39.982962 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:10:39.982986 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:10:42.558472 systemd[1]: Started systemd-journald.service. Oct 2 19:10:39.982997 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:10:42.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:39.983164 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:10:39.983194 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:10:42.558733 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:10:39.983206 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:10:39.983562 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:10:39.983602 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:10:39.983622 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:10:39.983638 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:10:39.983654 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:10:39.983671 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:10:42.162679 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:42Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:10:42.163016 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:42Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:10:42.559520 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:10:42.163136 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:42Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:10:42.163328 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:42Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:10:42.163414 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:42Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:10:42.163484 /usr/lib/systemd/system-generators/torcx-generator[887]: time="2023-10-02T19:10:42Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:10:42.560474 systemd[1]: Mounted tmp.mount. Oct 2 19:10:42.561469 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:10:42.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.562402 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:10:42.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.563214 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:10:42.563341 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:10:42.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.564542 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:10:42.564707 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:10:42.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.565759 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:10:42.565907 systemd[1]: Finished modprobe@drm.service. Oct 2 19:10:42.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.566000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.566836 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:10:42.566980 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:10:42.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.567939 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:10:42.568072 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:10:42.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.568895 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:10:42.569071 systemd[1]: Finished modprobe@loop.service. Oct 2 19:10:42.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.570007 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:10:42.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.571037 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:10:42.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.572013 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:10:42.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.573171 systemd[1]: Reached target network-pre.target. Oct 2 19:10:42.575105 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:10:42.576615 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:10:42.577200 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:10:42.578285 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:10:42.579724 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:10:42.580378 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:10:42.581220 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:10:42.581967 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:10:42.582803 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:10:42.584248 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:10:42.588897 systemd-journald[972]: Time spent on flushing to /var/log/journal/526601b0d64d4bc4916c28cf0f99f1cf is 17.215ms for 1165 entries. Oct 2 19:10:42.588897 systemd-journald[972]: System Journal (/var/log/journal/526601b0d64d4bc4916c28cf0f99f1cf) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:10:42.625971 systemd-journald[972]: Received client request to flush runtime journal. Oct 2 19:10:42.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.599000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.589115 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:10:42.626899 udevadm[991]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:10:42.590889 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:10:42.592643 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:10:42.593312 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:10:42.599614 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:10:42.601284 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:10:42.602161 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:10:42.610443 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:10:42.612300 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:10:42.626702 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:10:42.627000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:42.636699 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:10:42.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.036765 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:10:43.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.037000 audit: BPF prog-id=24 op=LOAD Oct 2 19:10:43.037000 audit: BPF prog-id=25 op=LOAD Oct 2 19:10:43.037000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:10:43.037000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:10:43.038789 systemd[1]: Starting systemd-udevd.service... Oct 2 19:10:43.053266 systemd-udevd[995]: Using default interface naming scheme 'v252'. Oct 2 19:10:43.069542 systemd[1]: Started systemd-udevd.service. Oct 2 19:10:43.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.071000 audit: BPF prog-id=26 op=LOAD Oct 2 19:10:43.072303 systemd[1]: Starting systemd-networkd.service... Oct 2 19:10:43.081000 audit: BPF prog-id=27 op=LOAD Oct 2 19:10:43.081000 audit: BPF prog-id=28 op=LOAD Oct 2 19:10:43.081000 audit: BPF prog-id=29 op=LOAD Oct 2 19:10:43.082570 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:10:43.103904 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:10:43.117227 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:10:43.118133 systemd[1]: Started systemd-userdbd.service. Oct 2 19:10:43.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.138385 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:10:43.142380 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:10:43.157000 audit[1007]: AVC avc: denied { confidentiality } for pid=1007 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:10:43.157000 audit[1007]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55d9224bfe10 a1=32194 a2=7f5f6305cbc5 a3=5 items=106 ppid=995 pid=1007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:43.157000 audit: CWD cwd="/" Oct 2 19:10:43.157000 audit: PATH item=0 name=(null) inode=16402 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=1 name=(null) inode=16403 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=2 name=(null) inode=16402 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=3 name=(null) inode=16404 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=4 name=(null) inode=16402 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=5 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=6 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=7 name=(null) inode=16406 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=8 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=9 name=(null) inode=16407 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=10 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=11 name=(null) inode=16408 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=12 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=13 name=(null) inode=16409 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=14 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=15 name=(null) inode=16410 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=16 name=(null) inode=16402 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=17 name=(null) inode=16411 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=18 name=(null) inode=16411 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=19 name=(null) inode=16412 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=20 name=(null) inode=16411 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=21 name=(null) inode=16413 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=22 name=(null) inode=16411 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=23 name=(null) inode=16414 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=24 name=(null) inode=16411 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=25 name=(null) inode=16415 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=26 name=(null) inode=16411 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=27 name=(null) inode=16416 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=28 name=(null) inode=16402 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=29 name=(null) inode=16417 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=30 name=(null) inode=16417 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=31 name=(null) inode=16418 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=32 name=(null) inode=16417 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=33 name=(null) inode=16419 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=34 name=(null) inode=16417 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=35 name=(null) inode=16420 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=36 name=(null) inode=16417 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=37 name=(null) inode=16421 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=38 name=(null) inode=16417 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=39 name=(null) inode=16422 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=40 name=(null) inode=16402 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=41 name=(null) inode=16423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=42 name=(null) inode=16423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=43 name=(null) inode=16424 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=44 name=(null) inode=16423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=45 name=(null) inode=16425 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=46 name=(null) inode=16423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=47 name=(null) inode=16426 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=48 name=(null) inode=16423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=49 name=(null) inode=16427 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=50 name=(null) inode=16423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=51 name=(null) inode=16428 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=52 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=53 name=(null) inode=16429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=54 name=(null) inode=16429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=55 name=(null) inode=16430 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=56 name=(null) inode=16429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=57 name=(null) inode=16431 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=58 name=(null) inode=16429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=59 name=(null) inode=16432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=60 name=(null) inode=16432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=61 name=(null) inode=16433 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=62 name=(null) inode=16432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=63 name=(null) inode=16434 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=64 name=(null) inode=16432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=65 name=(null) inode=16435 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=66 name=(null) inode=16432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=67 name=(null) inode=16436 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=68 name=(null) inode=16432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=69 name=(null) inode=16437 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=70 name=(null) inode=16429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=71 name=(null) inode=16438 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=72 name=(null) inode=16438 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=73 name=(null) inode=16439 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=74 name=(null) inode=16438 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=75 name=(null) inode=16440 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=76 name=(null) inode=16438 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=77 name=(null) inode=16441 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=78 name=(null) inode=16438 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=79 name=(null) inode=16442 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=80 name=(null) inode=16438 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=81 name=(null) inode=16443 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=82 name=(null) inode=16429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=83 name=(null) inode=16444 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=84 name=(null) inode=16444 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=85 name=(null) inode=16445 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=86 name=(null) inode=16444 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=87 name=(null) inode=16446 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=88 name=(null) inode=16444 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=89 name=(null) inode=16447 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=90 name=(null) inode=16444 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=91 name=(null) inode=16448 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=92 name=(null) inode=16444 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=93 name=(null) inode=16449 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=94 name=(null) inode=16429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=95 name=(null) inode=16450 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=96 name=(null) inode=16450 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=97 name=(null) inode=16451 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=98 name=(null) inode=16450 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=99 name=(null) inode=16452 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=100 name=(null) inode=16450 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=101 name=(null) inode=16453 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=102 name=(null) inode=16450 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=103 name=(null) inode=16454 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=104 name=(null) inode=16450 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PATH item=105 name=(null) inode=16455 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:10:43.157000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:10:43.170913 systemd-networkd[1004]: lo: Link UP Oct 2 19:10:43.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.170916 systemd-networkd[1004]: lo: Gained carrier Oct 2 19:10:43.171233 systemd-networkd[1004]: Enumeration completed Oct 2 19:10:43.171305 systemd[1]: Started systemd-networkd.service. Oct 2 19:10:43.171472 systemd-networkd[1004]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:10:43.172815 systemd-networkd[1004]: eth0: Link UP Oct 2 19:10:43.172823 systemd-networkd[1004]: eth0: Gained carrier Oct 2 19:10:43.180399 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Oct 2 19:10:43.182392 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 0 Oct 2 19:10:43.189386 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:10:43.189496 systemd-networkd[1004]: eth0: DHCPv4 address 10.0.0.69/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:10:43.253576 kernel: kvm: Nested Virtualization enabled Oct 2 19:10:43.253654 kernel: SVM: kvm: Nested Paging enabled Oct 2 19:10:43.268384 kernel: EDAC MC: Ver: 3.0.0 Oct 2 19:10:43.286635 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:10:43.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.288129 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:10:43.301504 lvm[1032]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:10:43.326134 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:10:43.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.326966 systemd[1]: Reached target cryptsetup.target. Oct 2 19:10:43.328511 systemd[1]: Starting lvm2-activation.service... Oct 2 19:10:43.331337 lvm[1033]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:10:43.361536 systemd[1]: Finished lvm2-activation.service. Oct 2 19:10:43.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.362355 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:10:43.363018 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:10:43.363045 systemd[1]: Reached target local-fs.target. Oct 2 19:10:43.363708 systemd[1]: Reached target machines.target. Oct 2 19:10:43.365338 systemd[1]: Starting ldconfig.service... Oct 2 19:10:43.366201 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:10:43.366243 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:10:43.367084 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:10:43.368630 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:10:43.370261 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:10:43.371104 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:10:43.371141 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:10:43.371855 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:10:43.374293 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1035 (bootctl) Oct 2 19:10:43.375244 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:10:43.384790 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:10:43.385095 systemd-tmpfiles[1038]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:10:43.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.386253 systemd-tmpfiles[1038]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:10:43.387942 systemd-tmpfiles[1038]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:10:43.410160 systemd-fsck[1043]: fsck.fat 4.2 (2021-01-31) Oct 2 19:10:43.410160 systemd-fsck[1043]: /dev/vda1: 790 files, 115092/258078 clusters Oct 2 19:10:43.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.411469 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:10:43.413640 systemd[1]: Mounting boot.mount... Oct 2 19:10:43.557794 systemd[1]: Mounted boot.mount. Oct 2 19:10:43.569190 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:10:43.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.616346 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:10:43.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.618469 systemd[1]: Starting audit-rules.service... Oct 2 19:10:43.619707 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:10:43.621917 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:10:43.623000 audit: BPF prog-id=30 op=LOAD Oct 2 19:10:43.624562 systemd[1]: Starting systemd-resolved.service... Oct 2 19:10:43.625000 audit: BPF prog-id=31 op=LOAD Oct 2 19:10:43.626697 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:10:43.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.634000 audit[1053]: SYSTEM_BOOT pid=1053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.629912 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:10:43.630990 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:10:43.632090 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:10:43.638942 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:10:43.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.647626 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:10:43.692352 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:10:43.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.726694 systemd[1]: Reached target time-set.target. Oct 2 19:10:43.102136 systemd-timesyncd[1052]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:10:43.286455 systemd-journald[972]: Time jumped backwards, rotating. Oct 2 19:10:43.102000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:10:43.102000 audit[1069]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdfea2c190 a2=420 a3=0 items=0 ppid=1047 pid=1069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:43.102000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:10:43.286740 augenrules[1069]: No rules Oct 2 19:10:43.286864 ldconfig[1034]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:10:43.103041 systemd-timesyncd[1052]: Initial clock synchronization to Mon 2023-10-02 19:10:43.102062 UTC. Oct 2 19:10:43.103675 systemd-resolved[1051]: Positive Trust Anchors: Oct 2 19:10:43.103683 systemd-resolved[1051]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:10:43.103710 systemd-resolved[1051]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:10:43.103943 systemd[1]: Finished audit-rules.service. Oct 2 19:10:43.118964 systemd-resolved[1051]: Defaulting to hostname 'linux'. Oct 2 19:10:43.120242 systemd[1]: Started systemd-resolved.service. Oct 2 19:10:43.120843 systemd[1]: Reached target network.target. Oct 2 19:10:43.121324 systemd[1]: Reached target nss-lookup.target. Oct 2 19:10:43.277371 systemd[1]: Finished ldconfig.service. Oct 2 19:10:43.279229 systemd[1]: Starting systemd-update-done.service... Oct 2 19:10:43.282325 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:10:43.282994 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:10:43.284777 systemd[1]: Finished systemd-update-done.service. Oct 2 19:10:43.285691 systemd[1]: Reached target sysinit.target. Oct 2 19:10:43.286515 systemd[1]: Started motdgen.path. Oct 2 19:10:43.287102 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:10:43.288239 systemd[1]: Started logrotate.timer. Oct 2 19:10:43.288889 systemd[1]: Started mdadm.timer. Oct 2 19:10:43.289415 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:10:43.290085 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:10:43.290132 systemd[1]: Reached target paths.target. Oct 2 19:10:43.290696 systemd[1]: Reached target timers.target. Oct 2 19:10:43.291555 systemd[1]: Listening on dbus.socket. Oct 2 19:10:43.293032 systemd[1]: Starting docker.socket... Oct 2 19:10:43.295581 systemd[1]: Listening on sshd.socket. Oct 2 19:10:43.296370 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:10:43.296705 systemd[1]: Listening on docker.socket. Oct 2 19:10:43.297314 systemd[1]: Reached target sockets.target. Oct 2 19:10:43.297962 systemd[1]: Reached target basic.target. Oct 2 19:10:43.298491 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:10:43.298512 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:10:43.299283 systemd[1]: Starting containerd.service... Oct 2 19:10:43.300570 systemd[1]: Starting dbus.service... Oct 2 19:10:43.301918 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:10:43.303540 systemd[1]: Starting extend-filesystems.service... Oct 2 19:10:43.304156 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:10:43.305162 systemd[1]: Starting motdgen.service... Oct 2 19:10:43.309611 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:10:43.316327 dbus-daemon[1079]: [system] SELinux support is enabled Oct 2 19:10:43.326807 jq[1080]: false Oct 2 19:10:43.311000 systemd[1]: Starting prepare-critools.service... Oct 2 19:10:43.312414 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:10:43.313932 systemd[1]: Starting sshd-keygen.service... Oct 2 19:10:43.316765 systemd[1]: Starting systemd-logind.service... Oct 2 19:10:43.317435 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:10:43.317482 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:10:43.335102 jq[1096]: true Oct 2 19:10:43.317838 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:10:43.318613 systemd[1]: Starting update-engine.service... Oct 2 19:10:43.321029 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:10:43.324986 systemd[1]: Started dbus.service. Oct 2 19:10:43.331937 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:10:43.332147 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:10:43.334032 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:10:43.334204 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:10:43.336182 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:10:43.337277 systemd[1]: Finished motdgen.service. Oct 2 19:10:43.371042 tar[1102]: ./ Oct 2 19:10:43.371042 tar[1102]: ./loopback Oct 2 19:10:43.345912 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:10:43.371411 jq[1104]: true Oct 2 19:10:43.345948 systemd[1]: Reached target system-config.target. Oct 2 19:10:43.346711 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:10:43.346723 systemd[1]: Reached target user-config.target. Oct 2 19:10:43.383996 extend-filesystems[1081]: Found sr0 Oct 2 19:10:43.384998 extend-filesystems[1081]: Found vda Oct 2 19:10:43.384998 extend-filesystems[1081]: Found vda1 Oct 2 19:10:43.384998 extend-filesystems[1081]: Found vda2 Oct 2 19:10:43.384998 extend-filesystems[1081]: Found vda3 Oct 2 19:10:43.384998 extend-filesystems[1081]: Found usr Oct 2 19:10:43.384998 extend-filesystems[1081]: Found vda4 Oct 2 19:10:43.384998 extend-filesystems[1081]: Found vda6 Oct 2 19:10:43.384998 extend-filesystems[1081]: Found vda7 Oct 2 19:10:43.384998 extend-filesystems[1081]: Found vda9 Oct 2 19:10:43.384998 extend-filesystems[1081]: Checking size of /dev/vda9 Oct 2 19:10:43.410583 tar[1103]: crictl Oct 2 19:10:43.410319 systemd-logind[1090]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:10:43.410344 systemd-logind[1090]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:10:43.411891 systemd-logind[1090]: New seat seat0. Oct 2 19:10:43.414295 bash[1122]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:10:43.414645 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:10:43.418782 systemd[1]: Started systemd-logind.service. Oct 2 19:10:43.434767 update_engine[1093]: I1002 19:10:43.434342 1093 main.cc:92] Flatcar Update Engine starting Oct 2 19:10:43.437408 extend-filesystems[1081]: Old size kept for /dev/vda9 Oct 2 19:10:43.438392 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:10:43.438579 systemd[1]: Finished extend-filesystems.service. Oct 2 19:10:43.439070 tar[1102]: ./bandwidth Oct 2 19:10:43.439982 update_engine[1093]: I1002 19:10:43.439888 1093 update_check_scheduler.cc:74] Next update check in 7m19s Oct 2 19:10:43.440089 systemd[1]: Started update-engine.service. Oct 2 19:10:43.443249 systemd[1]: Started locksmithd.service. Oct 2 19:10:43.452412 env[1105]: time="2023-10-02T19:10:43.452363008Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:10:43.486155 env[1105]: time="2023-10-02T19:10:43.486105299Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:10:43.486451 env[1105]: time="2023-10-02T19:10:43.486434997Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:10:43.488468 env[1105]: time="2023-10-02T19:10:43.488445759Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:10:43.488554 env[1105]: time="2023-10-02T19:10:43.488537461Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:10:43.488791 env[1105]: time="2023-10-02T19:10:43.488772492Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:10:43.488882 env[1105]: time="2023-10-02T19:10:43.488853994Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:10:43.488961 env[1105]: time="2023-10-02T19:10:43.488942230Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:10:43.489049 env[1105]: time="2023-10-02T19:10:43.489032319Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:10:43.489204 env[1105]: time="2023-10-02T19:10:43.489188863Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:10:43.489506 env[1105]: time="2023-10-02T19:10:43.489477273Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:10:43.489686 env[1105]: time="2023-10-02T19:10:43.489668031Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:10:43.489758 env[1105]: time="2023-10-02T19:10:43.489740688Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:10:43.489892 env[1105]: time="2023-10-02T19:10:43.489866554Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:10:43.489962 env[1105]: time="2023-10-02T19:10:43.489944600Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:10:43.494787 env[1105]: time="2023-10-02T19:10:43.494766855Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:10:43.494892 env[1105]: time="2023-10-02T19:10:43.494859970Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:10:43.494967 env[1105]: time="2023-10-02T19:10:43.494946592Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:10:43.495059 env[1105]: time="2023-10-02T19:10:43.495042833Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:10:43.495133 env[1105]: time="2023-10-02T19:10:43.495114878Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:10:43.495222 env[1105]: time="2023-10-02T19:10:43.495203845Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:10:43.495300 env[1105]: time="2023-10-02T19:10:43.495283003Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:10:43.495379 env[1105]: time="2023-10-02T19:10:43.495361951Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:10:43.495451 env[1105]: time="2023-10-02T19:10:43.495433876Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:10:43.495525 env[1105]: time="2023-10-02T19:10:43.495507114Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:10:43.495596 env[1105]: time="2023-10-02T19:10:43.495578848Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:10:43.495674 env[1105]: time="2023-10-02T19:10:43.495656534Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:10:43.495819 env[1105]: time="2023-10-02T19:10:43.495794142Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:10:43.495981 env[1105]: time="2023-10-02T19:10:43.495965103Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:10:43.496269 env[1105]: time="2023-10-02T19:10:43.496251760Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:10:43.496358 env[1105]: time="2023-10-02T19:10:43.496339956Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.496434 env[1105]: time="2023-10-02T19:10:43.496416039Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:10:43.496539 env[1105]: time="2023-10-02T19:10:43.496520665Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.496615 env[1105]: time="2023-10-02T19:10:43.496596838Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.496690 env[1105]: time="2023-10-02T19:10:43.496672339Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.496764 env[1105]: time="2023-10-02T19:10:43.496746468Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.496851 env[1105]: time="2023-10-02T19:10:43.496833251Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.496954 env[1105]: time="2023-10-02T19:10:43.496936114Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.497030 env[1105]: time="2023-10-02T19:10:43.497010313Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.497102 env[1105]: time="2023-10-02T19:10:43.497084543Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.497215 env[1105]: time="2023-10-02T19:10:43.497197875Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:10:43.497375 env[1105]: time="2023-10-02T19:10:43.497352205Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.497458 env[1105]: time="2023-10-02T19:10:43.497440190Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.497535 env[1105]: time="2023-10-02T19:10:43.497517505Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.497607 env[1105]: time="2023-10-02T19:10:43.497589239Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:10:43.497684 env[1105]: time="2023-10-02T19:10:43.497664120Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:10:43.497751 env[1105]: time="2023-10-02T19:10:43.497733179Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:10:43.497839 env[1105]: time="2023-10-02T19:10:43.497820263Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:10:43.497947 env[1105]: time="2023-10-02T19:10:43.497926432Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:10:43.498219 env[1105]: time="2023-10-02T19:10:43.498170990Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:10:43.499653 env[1105]: time="2023-10-02T19:10:43.498334968Z" level=info msg="Connect containerd service" Oct 2 19:10:43.499653 env[1105]: time="2023-10-02T19:10:43.498369994Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:10:43.500920 env[1105]: time="2023-10-02T19:10:43.500831801Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:10:43.502317 env[1105]: time="2023-10-02T19:10:43.502301939Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:10:43.502419 env[1105]: time="2023-10-02T19:10:43.502400824Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:10:43.502536 env[1105]: time="2023-10-02T19:10:43.502523504Z" level=info msg="containerd successfully booted in 0.050741s" Oct 2 19:10:43.502629 systemd[1]: Started containerd.service. Oct 2 19:10:43.502783 env[1105]: time="2023-10-02T19:10:43.502758706Z" level=info msg="Start subscribing containerd event" Oct 2 19:10:43.502891 env[1105]: time="2023-10-02T19:10:43.502852482Z" level=info msg="Start recovering state" Oct 2 19:10:43.503013 env[1105]: time="2023-10-02T19:10:43.502980462Z" level=info msg="Start event monitor" Oct 2 19:10:43.503084 env[1105]: time="2023-10-02T19:10:43.503067184Z" level=info msg="Start snapshots syncer" Oct 2 19:10:43.503164 env[1105]: time="2023-10-02T19:10:43.503143057Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:10:43.503239 env[1105]: time="2023-10-02T19:10:43.503218608Z" level=info msg="Start streaming server" Oct 2 19:10:43.518471 tar[1102]: ./ptp Oct 2 19:10:43.558299 tar[1102]: ./vlan Oct 2 19:10:43.581289 locksmithd[1134]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:10:43.591772 tar[1102]: ./host-device Oct 2 19:10:43.624015 tar[1102]: ./tuning Oct 2 19:10:43.652279 tar[1102]: ./vrf Oct 2 19:10:43.681760 tar[1102]: ./sbr Oct 2 19:10:43.712022 tar[1102]: ./tap Oct 2 19:10:43.756458 tar[1102]: ./dhcp Oct 2 19:10:43.858149 tar[1102]: ./static Oct 2 19:10:43.891980 tar[1102]: ./firewall Oct 2 19:10:43.935825 tar[1102]: ./macvlan Oct 2 19:10:43.949039 systemd[1]: Finished prepare-critools.service. Oct 2 19:10:43.968300 tar[1102]: ./dummy Oct 2 19:10:43.980999 systemd-networkd[1004]: eth0: Gained IPv6LL Oct 2 19:10:43.997490 tar[1102]: ./bridge Oct 2 19:10:44.029526 tar[1102]: ./ipvlan Oct 2 19:10:44.058526 tar[1102]: ./portmap Oct 2 19:10:44.087573 tar[1102]: ./host-local Oct 2 19:10:44.121288 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:10:44.722116 sshd_keygen[1100]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:10:44.739814 systemd[1]: Finished sshd-keygen.service. Oct 2 19:10:44.742134 systemd[1]: Starting issuegen.service... Oct 2 19:10:44.747288 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:10:44.747440 systemd[1]: Finished issuegen.service. Oct 2 19:10:44.749399 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:10:44.754747 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:10:44.757069 systemd[1]: Started getty@tty1.service. Oct 2 19:10:44.759068 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:10:44.759796 systemd[1]: Reached target getty.target. Oct 2 19:10:44.760415 systemd[1]: Reached target multi-user.target. Oct 2 19:10:44.762328 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:10:44.768851 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:10:44.769038 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:10:44.769850 systemd[1]: Startup finished in 512ms (kernel) + 6.842s (initrd) + 5.915s (userspace) = 13.269s. Oct 2 19:10:47.413092 systemd[1]: Created slice system-sshd.slice. Oct 2 19:10:47.414200 systemd[1]: Started sshd@0-10.0.0.69:22-10.0.0.1:58512.service. Oct 2 19:10:47.455475 sshd[1162]: Accepted publickey for core from 10.0.0.1 port 58512 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:10:47.457139 sshd[1162]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:47.465612 systemd[1]: Created slice user-500.slice. Oct 2 19:10:47.466657 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:10:47.468287 systemd-logind[1090]: New session 1 of user core. Oct 2 19:10:47.475690 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:10:47.477262 systemd[1]: Starting user@500.service... Oct 2 19:10:47.479952 (systemd)[1165]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:47.546774 systemd[1165]: Queued start job for default target default.target. Oct 2 19:10:47.547226 systemd[1165]: Reached target paths.target. Oct 2 19:10:47.547245 systemd[1165]: Reached target sockets.target. Oct 2 19:10:47.547257 systemd[1165]: Reached target timers.target. Oct 2 19:10:47.547268 systemd[1165]: Reached target basic.target. Oct 2 19:10:47.547299 systemd[1165]: Reached target default.target. Oct 2 19:10:47.547319 systemd[1165]: Startup finished in 61ms. Oct 2 19:10:47.547466 systemd[1]: Started user@500.service. Oct 2 19:10:47.548434 systemd[1]: Started session-1.scope. Oct 2 19:10:47.598950 systemd[1]: Started sshd@1-10.0.0.69:22-10.0.0.1:58526.service. Oct 2 19:10:47.628187 sshd[1174]: Accepted publickey for core from 10.0.0.1 port 58526 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:10:47.629354 sshd[1174]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:47.633542 systemd-logind[1090]: New session 2 of user core. Oct 2 19:10:47.634660 systemd[1]: Started session-2.scope. Oct 2 19:10:47.690231 sshd[1174]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:47.693197 systemd[1]: Started sshd@2-10.0.0.69:22-10.0.0.1:58540.service. Oct 2 19:10:47.693573 systemd[1]: sshd@1-10.0.0.69:22-10.0.0.1:58526.service: Deactivated successfully. Oct 2 19:10:47.694260 systemd-logind[1090]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:10:47.694288 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:10:47.695013 systemd-logind[1090]: Removed session 2. Oct 2 19:10:47.722153 sshd[1179]: Accepted publickey for core from 10.0.0.1 port 58540 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:10:47.723061 sshd[1179]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:47.726015 systemd-logind[1090]: New session 3 of user core. Oct 2 19:10:47.726725 systemd[1]: Started session-3.scope. Oct 2 19:10:47.775269 sshd[1179]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:47.777327 systemd[1]: sshd@2-10.0.0.69:22-10.0.0.1:58540.service: Deactivated successfully. Oct 2 19:10:47.777796 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:10:47.778210 systemd-logind[1090]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:10:47.779004 systemd[1]: Started sshd@3-10.0.0.69:22-10.0.0.1:58550.service. Oct 2 19:10:47.779581 systemd-logind[1090]: Removed session 3. Oct 2 19:10:47.806372 sshd[1186]: Accepted publickey for core from 10.0.0.1 port 58550 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:10:47.807364 sshd[1186]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:47.810247 systemd-logind[1090]: New session 4 of user core. Oct 2 19:10:47.810964 systemd[1]: Started session-4.scope. Oct 2 19:10:47.862914 sshd[1186]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:47.865567 systemd[1]: sshd@3-10.0.0.69:22-10.0.0.1:58550.service: Deactivated successfully. Oct 2 19:10:47.866045 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:10:47.866495 systemd-logind[1090]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:10:47.867368 systemd[1]: Started sshd@4-10.0.0.69:22-10.0.0.1:58564.service. Oct 2 19:10:47.867919 systemd-logind[1090]: Removed session 4. Oct 2 19:10:47.894668 sshd[1192]: Accepted publickey for core from 10.0.0.1 port 58564 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:10:47.895505 sshd[1192]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:47.898386 systemd-logind[1090]: New session 5 of user core. Oct 2 19:10:47.899561 systemd[1]: Started session-5.scope. Oct 2 19:10:47.955496 sudo[1195]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:10:47.955649 sudo[1195]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:10:47.964039 dbus-daemon[1079]: н٫\xd7U: received setenforce notice (enforcing=35798944) Oct 2 19:10:47.965835 sudo[1195]: pam_unix(sudo:session): session closed for user root Oct 2 19:10:47.967963 sshd[1192]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:47.970143 systemd[1]: sshd@4-10.0.0.69:22-10.0.0.1:58564.service: Deactivated successfully. Oct 2 19:10:47.970590 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:10:47.971080 systemd-logind[1090]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:10:47.971916 systemd[1]: Started sshd@5-10.0.0.69:22-10.0.0.1:58570.service. Oct 2 19:10:47.972480 systemd-logind[1090]: Removed session 5. Oct 2 19:10:47.999574 sshd[1199]: Accepted publickey for core from 10.0.0.1 port 58570 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:10:48.000373 sshd[1199]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:48.003364 systemd-logind[1090]: New session 6 of user core. Oct 2 19:10:48.004063 systemd[1]: Started session-6.scope. Oct 2 19:10:48.054987 sudo[1203]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:10:48.055151 sudo[1203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:10:48.057308 sudo[1203]: pam_unix(sudo:session): session closed for user root Oct 2 19:10:48.060927 sudo[1202]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:10:48.061072 sudo[1202]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:10:48.067982 systemd[1]: Stopping audit-rules.service... Oct 2 19:10:48.067000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:10:48.068960 auditctl[1206]: No rules Oct 2 19:10:48.069223 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:10:48.069375 systemd[1]: Stopped audit-rules.service. Oct 2 19:10:48.070819 kernel: kauditd_printk_skb: 237 callbacks suppressed Oct 2 19:10:48.070852 kernel: audit: type=1305 audit(1696273848.067:166): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:10:48.070866 kernel: audit: type=1300 audit(1696273848.067:166): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc2dc3b6f0 a2=420 a3=0 items=0 ppid=1 pid=1206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:48.067000 audit[1206]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc2dc3b6f0 a2=420 a3=0 items=0 ppid=1 pid=1206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:48.071059 systemd[1]: Starting audit-rules.service... Oct 2 19:10:48.067000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:10:48.076535 kernel: audit: type=1327 audit(1696273848.067:166): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:10:48.076617 kernel: audit: type=1131 audit(1696273848.068:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.084110 augenrules[1223]: No rules Oct 2 19:10:48.084501 systemd[1]: Finished audit-rules.service. Oct 2 19:10:48.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.085903 sudo[1202]: pam_unix(sudo:session): session closed for user root Oct 2 19:10:48.085000 audit[1202]: USER_END pid=1202 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.087499 sshd[1199]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:48.089802 kernel: audit: type=1130 audit(1696273848.083:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.089840 kernel: audit: type=1106 audit(1696273848.085:169): pid=1202 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.089855 kernel: audit: type=1104 audit(1696273848.085:170): pid=1202 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.085000 audit[1202]: CRED_DISP pid=1202 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.089078 systemd[1]: sshd@5-10.0.0.69:22-10.0.0.1:58570.service: Deactivated successfully. Oct 2 19:10:48.089515 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:10:48.089949 systemd-logind[1090]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:10:48.090635 systemd[1]: Started sshd@6-10.0.0.69:22-10.0.0.1:58572.service. Oct 2 19:10:48.091307 systemd-logind[1090]: Removed session 6. Oct 2 19:10:48.091525 kernel: audit: type=1106 audit(1696273848.087:171): pid=1199 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:48.087000 audit[1199]: USER_END pid=1199 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:48.094285 kernel: audit: type=1104 audit(1696273848.087:172): pid=1199 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:48.087000 audit[1199]: CRED_DISP pid=1199 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:48.096498 kernel: audit: type=1131 audit(1696273848.088:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.69:22-10.0.0.1:58570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.69:22-10.0.0.1:58570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.69:22-10.0.0.1:58572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.118000 audit[1229]: USER_ACCT pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:48.119034 sshd[1229]: Accepted publickey for core from 10.0.0.1 port 58572 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:10:48.118000 audit[1229]: CRED_ACQ pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:48.118000 audit[1229]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc27e31310 a2=3 a3=0 items=0 ppid=1 pid=1229 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:48.118000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:48.119906 sshd[1229]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:48.122727 systemd-logind[1090]: New session 7 of user core. Oct 2 19:10:48.123463 systemd[1]: Started session-7.scope. Oct 2 19:10:48.125000 audit[1229]: USER_START pid=1229 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:48.126000 audit[1231]: CRED_ACQ pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:48.172000 audit[1232]: USER_ACCT pid=1232 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.173500 sudo[1232]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:10:48.172000 audit[1232]: CRED_REFR pid=1232 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.173652 sudo[1232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:10:48.174000 audit[1232]: USER_START pid=1232 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.857355 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:10:48.862573 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:10:48.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.862977 systemd[1]: Reached target network-online.target. Oct 2 19:10:48.864163 systemd[1]: Starting docker.service... Oct 2 19:10:48.896098 env[1249]: time="2023-10-02T19:10:48.896042304Z" level=info msg="Starting up" Oct 2 19:10:48.897152 env[1249]: time="2023-10-02T19:10:48.897132469Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:10:48.897152 env[1249]: time="2023-10-02T19:10:48.897146555Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:10:48.897221 env[1249]: time="2023-10-02T19:10:48.897162565Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:10:48.897221 env[1249]: time="2023-10-02T19:10:48.897170911Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:10:48.902029 env[1249]: time="2023-10-02T19:10:48.901997975Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:10:48.902029 env[1249]: time="2023-10-02T19:10:48.902022702Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:10:48.902123 env[1249]: time="2023-10-02T19:10:48.902043801Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:10:48.902123 env[1249]: time="2023-10-02T19:10:48.902055443Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:10:49.074914 env[1249]: time="2023-10-02T19:10:49.074843875Z" level=info msg="Loading containers: start." Oct 2 19:10:49.117000 audit[1283]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1283 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.117000 audit[1283]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff41440e30 a2=0 a3=7fff41440e1c items=0 ppid=1249 pid=1283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.117000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:10:49.119000 audit[1285]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.119000 audit[1285]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffca3eb87f0 a2=0 a3=7ffca3eb87dc items=0 ppid=1249 pid=1285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.119000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:10:49.120000 audit[1287]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.120000 audit[1287]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc0b063810 a2=0 a3=7ffc0b0637fc items=0 ppid=1249 pid=1287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.120000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:10:49.121000 audit[1289]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.121000 audit[1289]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdd8420e40 a2=0 a3=7ffdd8420e2c items=0 ppid=1249 pid=1289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.121000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:10:49.123000 audit[1291]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.123000 audit[1291]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdc1774be0 a2=0 a3=7ffdc1774bcc items=0 ppid=1249 pid=1291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.123000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:10:49.145000 audit[1296]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.145000 audit[1296]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffda42a7060 a2=0 a3=7ffda42a704c items=0 ppid=1249 pid=1296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.145000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:10:49.155000 audit[1298]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.155000 audit[1298]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe12599480 a2=0 a3=7ffe1259946c items=0 ppid=1249 pid=1298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.155000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:10:49.157000 audit[1300]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.157000 audit[1300]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffeb1713da0 a2=0 a3=7ffeb1713d8c items=0 ppid=1249 pid=1300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.157000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:10:49.158000 audit[1302]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.158000 audit[1302]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffc9d3efc00 a2=0 a3=7ffc9d3efbec items=0 ppid=1249 pid=1302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.158000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:10:49.166000 audit[1306]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.166000 audit[1306]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe064b3e90 a2=0 a3=7ffe064b3e7c items=0 ppid=1249 pid=1306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.166000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:10:49.167000 audit[1307]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.167000 audit[1307]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffda4e0f1e0 a2=0 a3=7ffda4e0f1cc items=0 ppid=1249 pid=1307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.167000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:10:49.176893 kernel: Initializing XFRM netlink socket Oct 2 19:10:49.214869 env[1249]: time="2023-10-02T19:10:49.214821974Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:10:49.230000 audit[1315]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.230000 audit[1315]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fffe8efcc60 a2=0 a3=7fffe8efcc4c items=0 ppid=1249 pid=1315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.230000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:10:49.240000 audit[1318]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.240000 audit[1318]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fffc77677d0 a2=0 a3=7fffc77677bc items=0 ppid=1249 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.240000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:10:49.243000 audit[1321]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.243000 audit[1321]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe57e82e70 a2=0 a3=7ffe57e82e5c items=0 ppid=1249 pid=1321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.243000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:10:49.244000 audit[1323]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.244000 audit[1323]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd0165ca30 a2=0 a3=7ffd0165ca1c items=0 ppid=1249 pid=1323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.244000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:10:49.246000 audit[1325]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.246000 audit[1325]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fff2a6d8960 a2=0 a3=7fff2a6d894c items=0 ppid=1249 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.246000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:10:49.248000 audit[1327]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.248000 audit[1327]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffeeb3e67d0 a2=0 a3=7ffeeb3e67bc items=0 ppid=1249 pid=1327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.248000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:10:49.250000 audit[1329]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.250000 audit[1329]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc1961a400 a2=0 a3=7ffc1961a3ec items=0 ppid=1249 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.250000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:10:49.257000 audit[1332]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.257000 audit[1332]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffebed15ce0 a2=0 a3=7ffebed15ccc items=0 ppid=1249 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.257000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:10:49.258000 audit[1334]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.258000 audit[1334]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd871c3c50 a2=0 a3=7ffd871c3c3c items=0 ppid=1249 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.258000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:10:49.260000 audit[1336]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.260000 audit[1336]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff82658b40 a2=0 a3=7fff82658b2c items=0 ppid=1249 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.260000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:10:49.261000 audit[1338]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.261000 audit[1338]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff2cce2040 a2=0 a3=7fff2cce202c items=0 ppid=1249 pid=1338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.261000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:10:49.263185 systemd-networkd[1004]: docker0: Link UP Oct 2 19:10:49.272000 audit[1342]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1342 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.272000 audit[1342]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc08fb2f40 a2=0 a3=7ffc08fb2f2c items=0 ppid=1249 pid=1342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.272000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:10:49.273000 audit[1343]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:10:49.273000 audit[1343]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffea4016440 a2=0 a3=7ffea401642c items=0 ppid=1249 pid=1343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:49.273000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:10:49.274622 env[1249]: time="2023-10-02T19:10:49.274565255Z" level=info msg="Loading containers: done." Oct 2 19:10:49.283462 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1484793212-merged.mount: Deactivated successfully. Oct 2 19:10:49.289941 env[1249]: time="2023-10-02T19:10:49.289896933Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:10:49.290094 env[1249]: time="2023-10-02T19:10:49.290066591Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:10:49.290177 env[1249]: time="2023-10-02T19:10:49.290160768Z" level=info msg="Daemon has completed initialization" Oct 2 19:10:49.307404 systemd[1]: Started docker.service. Oct 2 19:10:49.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:49.316548 env[1249]: time="2023-10-02T19:10:49.316498019Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:10:49.334585 systemd[1]: Reloading. Oct 2 19:10:49.390725 /usr/lib/systemd/system-generators/torcx-generator[1391]: time="2023-10-02T19:10:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:10:49.390753 /usr/lib/systemd/system-generators/torcx-generator[1391]: time="2023-10-02T19:10:49Z" level=info msg="torcx already run" Oct 2 19:10:49.459412 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:10:49.459428 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:10:49.477514 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit: BPF prog-id=37 op=LOAD Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.532000 audit: BPF prog-id=38 op=LOAD Oct 2 19:10:49.532000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:10:49.532000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit: BPF prog-id=39 op=LOAD Oct 2 19:10:49.533000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.533000 audit: BPF prog-id=40 op=LOAD Oct 2 19:10:49.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit: BPF prog-id=41 op=LOAD Oct 2 19:10:49.534000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:10:49.534000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.534000 audit: BPF prog-id=42 op=LOAD Oct 2 19:10:49.534000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:10:49.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit: BPF prog-id=43 op=LOAD Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit: BPF prog-id=44 op=LOAD Oct 2 19:10:49.535000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:10:49.535000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.536000 audit: BPF prog-id=45 op=LOAD Oct 2 19:10:49.536000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:10:49.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.536000 audit: BPF prog-id=46 op=LOAD Oct 2 19:10:49.536000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:10:49.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit: BPF prog-id=47 op=LOAD Oct 2 19:10:49.538000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit: BPF prog-id=48 op=LOAD Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.538000 audit: BPF prog-id=49 op=LOAD Oct 2 19:10:49.538000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:10:49.538000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:10:49.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.539000 audit: BPF prog-id=50 op=LOAD Oct 2 19:10:49.539000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:10:49.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:10:49.540000 audit: BPF prog-id=51 op=LOAD Oct 2 19:10:49.540000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:10:49.549414 systemd[1]: Started kubelet.service. Oct 2 19:10:49.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:49.595621 kubelet[1431]: E1002 19:10:49.595569 1431 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:10:49.597567 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:10:49.597681 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:10:49.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:10:49.830784 env[1105]: time="2023-10-02T19:10:49.830734379Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 19:10:50.466196 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount674453892.mount: Deactivated successfully. Oct 2 19:10:52.078805 env[1105]: time="2023-10-02T19:10:52.078738042Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:52.080650 env[1105]: time="2023-10-02T19:10:52.080615613Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:52.082366 env[1105]: time="2023-10-02T19:10:52.082310833Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:52.104849 env[1105]: time="2023-10-02T19:10:52.104808092Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:52.105519 env[1105]: time="2023-10-02T19:10:52.105494990Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce\"" Oct 2 19:10:52.115486 env[1105]: time="2023-10-02T19:10:52.115337482Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 19:10:55.065608 env[1105]: time="2023-10-02T19:10:55.065540249Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:55.070053 env[1105]: time="2023-10-02T19:10:55.070008861Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:55.072323 env[1105]: time="2023-10-02T19:10:55.072280281Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:55.075670 env[1105]: time="2023-10-02T19:10:55.075613173Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:55.076299 env[1105]: time="2023-10-02T19:10:55.076271137Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57\"" Oct 2 19:10:55.085549 env[1105]: time="2023-10-02T19:10:55.085517881Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 19:10:56.487856 env[1105]: time="2023-10-02T19:10:56.487795814Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:56.489646 env[1105]: time="2023-10-02T19:10:56.489616499Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:56.491666 env[1105]: time="2023-10-02T19:10:56.491636828Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:56.495184 env[1105]: time="2023-10-02T19:10:56.495152272Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:56.495834 env[1105]: time="2023-10-02T19:10:56.495802662Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8\"" Oct 2 19:10:56.504802 env[1105]: time="2023-10-02T19:10:56.504765875Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 19:10:57.927837 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1303028304.mount: Deactivated successfully. Oct 2 19:10:59.008236 env[1105]: time="2023-10-02T19:10:59.008166108Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:59.010023 env[1105]: time="2023-10-02T19:10:59.009971504Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:59.011411 env[1105]: time="2023-10-02T19:10:59.011364307Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:59.012822 env[1105]: time="2023-10-02T19:10:59.012751639Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:59.013131 env[1105]: time="2023-10-02T19:10:59.013098660Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0\"" Oct 2 19:10:59.022020 env[1105]: time="2023-10-02T19:10:59.021981792Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:10:59.534529 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2968851878.mount: Deactivated successfully. Oct 2 19:10:59.541292 env[1105]: time="2023-10-02T19:10:59.541245883Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:59.545276 env[1105]: time="2023-10-02T19:10:59.545230507Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:59.546743 env[1105]: time="2023-10-02T19:10:59.546697940Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:59.548291 env[1105]: time="2023-10-02T19:10:59.548263516Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:10:59.548817 env[1105]: time="2023-10-02T19:10:59.548783041Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:10:59.558269 env[1105]: time="2023-10-02T19:10:59.558224300Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 19:10:59.664140 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:10:59.664351 systemd[1]: Stopped kubelet.service. Oct 2 19:10:59.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:59.665030 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:10:59.665230 kernel: audit: type=1130 audit(1696273859.663:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:59.666115 systemd[1]: Started kubelet.service. Oct 2 19:10:59.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:59.668979 kernel: audit: type=1131 audit(1696273859.663:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:59.669023 kernel: audit: type=1130 audit(1696273859.665:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:59.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:59.709726 kubelet[1484]: E1002 19:10:59.709648 1484 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:10:59.713585 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:10:59.713735 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:10:59.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:10:59.741905 kernel: audit: type=1131 audit(1696273859.713:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:11:05.591972 env[1105]: time="2023-10-02T19:11:05.591897616Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:05.593918 env[1105]: time="2023-10-02T19:11:05.593831364Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:05.595794 env[1105]: time="2023-10-02T19:11:05.595753128Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:05.598040 env[1105]: time="2023-10-02T19:11:05.597988862Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:05.599013 env[1105]: time="2023-10-02T19:11:05.598953181Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9\"" Oct 2 19:11:05.613719 env[1105]: time="2023-10-02T19:11:05.613671859Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:11:06.188556 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1765182148.mount: Deactivated successfully. Oct 2 19:11:07.500635 env[1105]: time="2023-10-02T19:11:07.500581923Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:07.582173 env[1105]: time="2023-10-02T19:11:07.582099687Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:07.641166 env[1105]: time="2023-10-02T19:11:07.641117197Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:07.735895 env[1105]: time="2023-10-02T19:11:07.735794935Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:07.736411 env[1105]: time="2023-10-02T19:11:07.736365736Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:11:09.732255 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:11:09.732576 systemd[1]: Stopped kubelet.service. Oct 2 19:11:09.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:09.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:09.737082 kernel: audit: type=1130 audit(1696273869.731:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:09.737118 kernel: audit: type=1131 audit(1696273869.731:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:09.737143 kernel: audit: type=1130 audit(1696273869.734:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:09.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:09.734439 systemd[1]: Started kubelet.service. Oct 2 19:11:09.744593 systemd[1]: Stopping kubelet.service... Oct 2 19:11:09.746340 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:11:09.746525 systemd[1]: Stopped kubelet.service. Oct 2 19:11:09.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:09.749911 kernel: audit: type=1131 audit(1696273869.745:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:09.764694 systemd[1]: Reloading. Oct 2 19:11:09.830296 /usr/lib/systemd/system-generators/torcx-generator[1598]: time="2023-10-02T19:11:09Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:11:09.830327 /usr/lib/systemd/system-generators/torcx-generator[1598]: time="2023-10-02T19:11:09Z" level=info msg="torcx already run" Oct 2 19:11:09.892955 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:11:09.892977 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:11:09.912299 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:11:09.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.972557 kernel: audit: type=1400 audit(1696273869.967:391): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.972612 kernel: audit: type=1400 audit(1696273869.967:392): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.972635 kernel: audit: type=1400 audit(1696273869.967:393): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.974879 kernel: audit: type=1400 audit(1696273869.967:394): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.977055 kernel: audit: type=1400 audit(1696273869.967:395): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.979232 kernel: audit: type=1400 audit(1696273869.967:396): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.971000 audit: BPF prog-id=52 op=LOAD Oct 2 19:11:09.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.976000 audit: BPF prog-id=53 op=LOAD Oct 2 19:11:09.976000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:11:09.976000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:11:09.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit: BPF prog-id=54 op=LOAD Oct 2 19:11:09.980000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit: BPF prog-id=55 op=LOAD Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.980000 audit: BPF prog-id=56 op=LOAD Oct 2 19:11:09.980000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:11:09.980000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit: BPF prog-id=57 op=LOAD Oct 2 19:11:09.981000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit: BPF prog-id=58 op=LOAD Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.981000 audit: BPF prog-id=59 op=LOAD Oct 2 19:11:09.981000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:11:09.981000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit: BPF prog-id=60 op=LOAD Oct 2 19:11:09.982000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.983000 audit: BPF prog-id=61 op=LOAD Oct 2 19:11:09.983000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:11:09.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit: BPF prog-id=62 op=LOAD Oct 2 19:11:09.984000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit: BPF prog-id=63 op=LOAD Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.984000 audit: BPF prog-id=64 op=LOAD Oct 2 19:11:09.984000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:11:09.984000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit: BPF prog-id=65 op=LOAD Oct 2 19:11:09.985000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:09.985000 audit: BPF prog-id=66 op=LOAD Oct 2 19:11:09.985000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:11:10.000953 systemd[1]: Started kubelet.service. Oct 2 19:11:10.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:10.054447 kubelet[1640]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:11:10.054447 kubelet[1640]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:11:10.054447 kubelet[1640]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:11:10.054809 kubelet[1640]: I1002 19:11:10.054456 1640 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:11:10.424898 kubelet[1640]: I1002 19:11:10.424810 1640 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:11:10.424898 kubelet[1640]: I1002 19:11:10.424866 1640 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:11:10.425182 kubelet[1640]: I1002 19:11:10.425149 1640 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:11:10.429459 kubelet[1640]: I1002 19:11:10.429399 1640 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:11:10.430754 kubelet[1640]: E1002 19:11:10.430712 1640 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.69:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:10.438107 kubelet[1640]: I1002 19:11:10.438048 1640 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:11:10.438350 kubelet[1640]: I1002 19:11:10.438325 1640 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:11:10.438540 kubelet[1640]: I1002 19:11:10.438514 1640 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:11:10.438540 kubelet[1640]: I1002 19:11:10.438541 1640 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:11:10.438710 kubelet[1640]: I1002 19:11:10.438551 1640 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:11:10.438710 kubelet[1640]: I1002 19:11:10.438689 1640 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:11:10.438796 kubelet[1640]: I1002 19:11:10.438782 1640 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:11:10.438830 kubelet[1640]: I1002 19:11:10.438805 1640 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:11:10.438862 kubelet[1640]: I1002 19:11:10.438847 1640 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:11:10.438921 kubelet[1640]: I1002 19:11:10.438890 1640 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:11:10.439658 kubelet[1640]: W1002 19:11:10.439477 1640 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.69:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:10.439658 kubelet[1640]: E1002 19:11:10.439562 1640 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.69:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:10.439745 kubelet[1640]: W1002 19:11:10.439666 1640 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.69:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:10.439745 kubelet[1640]: E1002 19:11:10.439697 1640 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.69:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:10.439804 kubelet[1640]: I1002 19:11:10.439793 1640 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:11:10.440179 kubelet[1640]: W1002 19:11:10.440152 1640 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:11:10.440704 kubelet[1640]: I1002 19:11:10.440668 1640 server.go:1232] "Started kubelet" Oct 2 19:11:10.440809 kubelet[1640]: I1002 19:11:10.440783 1640 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:11:10.440963 kubelet[1640]: I1002 19:11:10.440938 1640 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:11:10.441257 kubelet[1640]: I1002 19:11:10.441232 1640 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:11:10.441499 kubelet[1640]: E1002 19:11:10.441396 1640 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a601911643f11", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 10, 440644369, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 10, 440644369, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"localhost"}': 'Post "https://10.0.0.69:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.69:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:11:10.441683 kubelet[1640]: I1002 19:11:10.441657 1640 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:11:10.443364 kubelet[1640]: E1002 19:11:10.443336 1640 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:11:10.443438 kubelet[1640]: E1002 19:11:10.443370 1640 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:11:10.444000 audit[1640]: AVC avc: denied { mac_admin } for pid=1640 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:10.444000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:11:10.444000 audit[1640]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e2a870 a1=c000d59c20 a2=c000e2a840 a3=25 items=0 ppid=1 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.444000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:11:10.445429 kubelet[1640]: I1002 19:11:10.445401 1640 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:11:10.444000 audit[1640]: AVC avc: denied { mac_admin } for pid=1640 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:10.444000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:11:10.444000 audit[1640]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e401a0 a1=c000d59c38 a2=c000e2a900 a3=25 items=0 ppid=1 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.444000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:11:10.445807 kubelet[1640]: I1002 19:11:10.445789 1640 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:11:10.445995 kubelet[1640]: I1002 19:11:10.445971 1640 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:11:10.446864 kubelet[1640]: I1002 19:11:10.446813 1640 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:11:10.447143 kubelet[1640]: I1002 19:11:10.447125 1640 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:11:10.447232 kubelet[1640]: I1002 19:11:10.447203 1640 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:11:10.448910 kubelet[1640]: W1002 19:11:10.448818 1640 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.69:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:10.448910 kubelet[1640]: E1002 19:11:10.448898 1640 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.69:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:10.449118 kubelet[1640]: E1002 19:11:10.448970 1640 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.69:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.69:6443: connect: connection refused" interval="200ms" Oct 2 19:11:10.448000 audit[1652]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1652 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:10.448000 audit[1652]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcda997730 a2=0 a3=7ffcda99771c items=0 ppid=1640 pid=1652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.448000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:11:10.450000 audit[1653]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1653 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:10.450000 audit[1653]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffede94a4f0 a2=0 a3=7ffede94a4dc items=0 ppid=1640 pid=1653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.450000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:11:10.452000 audit[1655]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1655 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:10.452000 audit[1655]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc5a71c1d0 a2=0 a3=7ffc5a71c1bc items=0 ppid=1640 pid=1655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.452000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:11:10.454000 audit[1657]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1657 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:10.454000 audit[1657]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff6a403a50 a2=0 a3=7fff6a403a3c items=0 ppid=1640 pid=1657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.454000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:11:10.459000 audit[1660]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1660 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:10.459000 audit[1660]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffcf4bb6420 a2=0 a3=7ffcf4bb640c items=0 ppid=1640 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.459000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:11:10.461308 kubelet[1640]: I1002 19:11:10.461260 1640 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:11:10.461000 audit[1661]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1661 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:10.461000 audit[1661]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe433783e0 a2=0 a3=7ffe433783cc items=0 ppid=1640 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.461000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:11:10.462484 kubelet[1640]: I1002 19:11:10.462272 1640 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:11:10.462484 kubelet[1640]: I1002 19:11:10.462294 1640 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:11:10.462484 kubelet[1640]: I1002 19:11:10.462325 1640 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:11:10.462484 kubelet[1640]: E1002 19:11:10.462378 1640 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:11:10.462000 audit[1663]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1663 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:10.462000 audit[1663]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffedefeecf0 a2=0 a3=7ffedefeecdc items=0 ppid=1640 pid=1663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.462000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:11:10.463000 audit[1664]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1664 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:10.463000 audit[1664]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdd07cd150 a2=0 a3=7ffdd07cd13c items=0 ppid=1640 pid=1664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.463000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:11:10.464000 audit[1665]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1665 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:10.464000 audit[1665]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe422c94a0 a2=0 a3=7ffe422c948c items=0 ppid=1640 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.464000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:11:10.465000 audit[1666]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1666 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:10.465000 audit[1666]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe8e998240 a2=0 a3=7ffe8e99822c items=0 ppid=1640 pid=1666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.465000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:11:10.468000 audit[1667]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1667 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:10.468000 audit[1667]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffcd0487110 a2=0 a3=7ffcd04870fc items=0 ppid=1640 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.468000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:11:10.469595 kubelet[1640]: W1002 19:11:10.469479 1640 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.69:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:10.469595 kubelet[1640]: E1002 19:11:10.469526 1640 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.69:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:10.469000 audit[1671]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1671 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:10.469000 audit[1671]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff8e3cb1c0 a2=0 a3=7fff8e3cb1ac items=0 ppid=1640 pid=1671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.469000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:11:10.476362 kubelet[1640]: I1002 19:11:10.476348 1640 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:11:10.476441 kubelet[1640]: I1002 19:11:10.476427 1640 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:11:10.476513 kubelet[1640]: I1002 19:11:10.476501 1640 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:11:10.479366 kubelet[1640]: I1002 19:11:10.479326 1640 policy_none.go:49] "None policy: Start" Oct 2 19:11:10.480066 kubelet[1640]: I1002 19:11:10.480041 1640 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:11:10.480140 kubelet[1640]: I1002 19:11:10.480081 1640 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:11:10.485704 systemd[1]: Created slice kubepods.slice. Oct 2 19:11:10.489728 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:11:10.492228 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:11:10.501963 kubelet[1640]: I1002 19:11:10.501912 1640 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:11:10.501000 audit[1640]: AVC avc: denied { mac_admin } for pid=1640 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:10.501000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:11:10.501000 audit[1640]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000fc15f0 a1=c000fb76e0 a2=c000fc15c0 a3=25 items=0 ppid=1 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:10.501000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:11:10.502303 kubelet[1640]: I1002 19:11:10.502022 1640 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:11:10.502303 kubelet[1640]: I1002 19:11:10.502274 1640 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:11:10.503186 kubelet[1640]: E1002 19:11:10.503167 1640 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:11:10.548931 kubelet[1640]: I1002 19:11:10.548870 1640 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:11:10.549389 kubelet[1640]: E1002 19:11:10.549368 1640 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.69:6443/api/v1/nodes\": dial tcp 10.0.0.69:6443: connect: connection refused" node="localhost" Oct 2 19:11:10.562611 kubelet[1640]: I1002 19:11:10.562555 1640 topology_manager.go:215] "Topology Admit Handler" podUID="fcfc7281b1bedb0e571f1c99bf795af5" podNamespace="kube-system" podName="kube-apiserver-localhost" Oct 2 19:11:10.563980 kubelet[1640]: I1002 19:11:10.563947 1640 topology_manager.go:215] "Topology Admit Handler" podUID="6961ff1365464b1e2d286a48d6c5e40f" podNamespace="kube-system" podName="kube-controller-manager-localhost" Oct 2 19:11:10.565256 kubelet[1640]: I1002 19:11:10.565239 1640 topology_manager.go:215] "Topology Admit Handler" podUID="b619222ebfcfd1a0c9478200f0921497" podNamespace="kube-system" podName="kube-scheduler-localhost" Oct 2 19:11:10.570518 systemd[1]: Created slice kubepods-burstable-podfcfc7281b1bedb0e571f1c99bf795af5.slice. Oct 2 19:11:10.583768 systemd[1]: Created slice kubepods-burstable-pod6961ff1365464b1e2d286a48d6c5e40f.slice. Oct 2 19:11:10.586866 systemd[1]: Created slice kubepods-burstable-podb619222ebfcfd1a0c9478200f0921497.slice. Oct 2 19:11:10.648033 kubelet[1640]: I1002 19:11:10.647939 1640 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:10.648033 kubelet[1640]: I1002 19:11:10.648050 1640 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:10.648320 kubelet[1640]: I1002 19:11:10.648086 1640 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:10.648320 kubelet[1640]: I1002 19:11:10.648120 1640 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:10.648320 kubelet[1640]: I1002 19:11:10.648147 1640 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b619222ebfcfd1a0c9478200f0921497-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b619222ebfcfd1a0c9478200f0921497\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:11:10.648320 kubelet[1640]: I1002 19:11:10.648175 1640 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fcfc7281b1bedb0e571f1c99bf795af5-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"fcfc7281b1bedb0e571f1c99bf795af5\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:11:10.648320 kubelet[1640]: I1002 19:11:10.648241 1640 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fcfc7281b1bedb0e571f1c99bf795af5-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"fcfc7281b1bedb0e571f1c99bf795af5\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:11:10.648561 kubelet[1640]: I1002 19:11:10.648281 1640 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fcfc7281b1bedb0e571f1c99bf795af5-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"fcfc7281b1bedb0e571f1c99bf795af5\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:11:10.648561 kubelet[1640]: I1002 19:11:10.648305 1640 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:10.650356 kubelet[1640]: E1002 19:11:10.650298 1640 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.69:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.69:6443: connect: connection refused" interval="400ms" Oct 2 19:11:10.750706 kubelet[1640]: I1002 19:11:10.750601 1640 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:11:10.750953 kubelet[1640]: E1002 19:11:10.750931 1640 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.69:6443/api/v1/nodes\": dial tcp 10.0.0.69:6443: connect: connection refused" node="localhost" Oct 2 19:11:10.882989 kubelet[1640]: E1002 19:11:10.882766 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:10.883790 env[1105]: time="2023-10-02T19:11:10.883740040Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:fcfc7281b1bedb0e571f1c99bf795af5,Namespace:kube-system,Attempt:0,}" Oct 2 19:11:10.886149 kubelet[1640]: E1002 19:11:10.885978 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:10.886362 env[1105]: time="2023-10-02T19:11:10.886315401Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:6961ff1365464b1e2d286a48d6c5e40f,Namespace:kube-system,Attempt:0,}" Oct 2 19:11:10.888995 kubelet[1640]: E1002 19:11:10.888970 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:10.889418 env[1105]: time="2023-10-02T19:11:10.889366013Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b619222ebfcfd1a0c9478200f0921497,Namespace:kube-system,Attempt:0,}" Oct 2 19:11:11.050977 kubelet[1640]: E1002 19:11:11.050862 1640 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.69:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.69:6443: connect: connection refused" interval="800ms" Oct 2 19:11:11.152779 kubelet[1640]: I1002 19:11:11.152741 1640 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:11:11.153178 kubelet[1640]: E1002 19:11:11.153083 1640 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.69:6443/api/v1/nodes\": dial tcp 10.0.0.69:6443: connect: connection refused" node="localhost" Oct 2 19:11:11.351596 kubelet[1640]: W1002 19:11:11.351459 1640 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.69:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:11.351596 kubelet[1640]: E1002 19:11:11.351545 1640 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.69:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:11.405166 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2454323342.mount: Deactivated successfully. Oct 2 19:11:11.409141 env[1105]: time="2023-10-02T19:11:11.409100787Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:11.411642 env[1105]: time="2023-10-02T19:11:11.411578514Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:11.412935 env[1105]: time="2023-10-02T19:11:11.412894433Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:11.413832 env[1105]: time="2023-10-02T19:11:11.413788239Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:11.415450 env[1105]: time="2023-10-02T19:11:11.415405733Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:11.417152 env[1105]: time="2023-10-02T19:11:11.417111122Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:11.418383 env[1105]: time="2023-10-02T19:11:11.418356227Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:11.422176 env[1105]: time="2023-10-02T19:11:11.422134104Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:11.423548 env[1105]: time="2023-10-02T19:11:11.423509624Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:11.424711 env[1105]: time="2023-10-02T19:11:11.424663428Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:11.425824 env[1105]: time="2023-10-02T19:11:11.425789700Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:11.427273 env[1105]: time="2023-10-02T19:11:11.427247355Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:11.449001 env[1105]: time="2023-10-02T19:11:11.448816662Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:11:11.449001 env[1105]: time="2023-10-02T19:11:11.448849594Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:11:11.449001 env[1105]: time="2023-10-02T19:11:11.448858471Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:11:11.449167 env[1105]: time="2023-10-02T19:11:11.449000958Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/34031a326b53d83f3cef15ca47f12c08000455df2c69cd614e437c38cd0a327a pid=1682 runtime=io.containerd.runc.v2 Oct 2 19:11:11.480006 env[1105]: time="2023-10-02T19:11:11.478693834Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:11:11.480006 env[1105]: time="2023-10-02T19:11:11.478727677Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:11:11.480006 env[1105]: time="2023-10-02T19:11:11.478736484Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:11:11.480006 env[1105]: time="2023-10-02T19:11:11.478898968Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/db5d91c1201e590e4cf702fb2c0c5f8da3499dd7631a3e62a0288969bdbdc280 pid=1704 runtime=io.containerd.runc.v2 Oct 2 19:11:11.480957 kubelet[1640]: W1002 19:11:11.480931 1640 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.69:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:11.481013 kubelet[1640]: E1002 19:11:11.480965 1640 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.69:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.69:6443: connect: connection refused Oct 2 19:11:11.485602 env[1105]: time="2023-10-02T19:11:11.485329320Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:11:11.485602 env[1105]: time="2023-10-02T19:11:11.485360188Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:11:11.485602 env[1105]: time="2023-10-02T19:11:11.485368984Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:11:11.485602 env[1105]: time="2023-10-02T19:11:11.485480794Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4e42695b9165cd0808945023b1a4629e6c39102488b2e6df0b184a8fb65aa695 pid=1716 runtime=io.containerd.runc.v2 Oct 2 19:11:11.487487 systemd[1]: Started cri-containerd-34031a326b53d83f3cef15ca47f12c08000455df2c69cd614e437c38cd0a327a.scope. Oct 2 19:11:11.515478 systemd[1]: Started cri-containerd-db5d91c1201e590e4cf702fb2c0c5f8da3499dd7631a3e62a0288969bdbdc280.scope. Oct 2 19:11:11.528347 systemd[1]: Started cri-containerd-4e42695b9165cd0808945023b1a4629e6c39102488b2e6df0b184a8fb65aa695.scope. Oct 2 19:11:11.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit: BPF prog-id=67 op=LOAD Oct 2 19:11:11.566000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1682 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334303331613332366235336438336633636566313563613437663132 Oct 2 19:11:11.566000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1682 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334303331613332366235336438336633636566313563613437663132 Oct 2 19:11:11.566000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.566000 audit: BPF prog-id=68 op=LOAD Oct 2 19:11:11.566000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00021d7b0 items=0 ppid=1682 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334303331613332366235336438336633636566313563613437663132 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit: BPF prog-id=69 op=LOAD Oct 2 19:11:11.568000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00021d7f8 items=0 ppid=1682 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334303331613332366235336438336633636566313563613437663132 Oct 2 19:11:11.568000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:11:11.568000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.568000 audit: BPF prog-id=70 op=LOAD Oct 2 19:11:11.568000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00021dc08 items=0 ppid=1682 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334303331613332366235336438336633636566313563613437663132 Oct 2 19:11:11.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.592000 audit: BPF prog-id=71 op=LOAD Oct 2 19:11:11.592000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.592000 audit[1725]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1704 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462356439316331323031653539306534636637303266623263306335 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1704 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462356439316331323031653539306534636637303266623263306335 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit: BPF prog-id=72 op=LOAD Oct 2 19:11:11.593000 audit[1725]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00036dbf0 items=0 ppid=1704 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462356439316331323031653539306534636637303266623263306335 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit: BPF prog-id=73 op=LOAD Oct 2 19:11:11.593000 audit[1725]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00036dc38 items=0 ppid=1704 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462356439316331323031653539306534636637303266623263306335 Oct 2 19:11:11.593000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:11:11.593000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { perfmon } for pid=1725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit[1725]: AVC avc: denied { bpf } for pid=1725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.593000 audit: BPF prog-id=74 op=LOAD Oct 2 19:11:11.593000 audit[1725]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003da048 items=0 ppid=1704 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462356439316331323031653539306534636637303266623263306335 Oct 2 19:11:11.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.598000 audit: BPF prog-id=75 op=LOAD Oct 2 19:11:11.598000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.598000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1716 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.598000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465343236393562393136356364303830383934353032336231613436 Oct 2 19:11:11.598000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.598000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1716 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.598000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465343236393562393136356364303830383934353032336231613436 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit: BPF prog-id=76 op=LOAD Oct 2 19:11:11.599000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000098360 items=0 ppid=1716 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465343236393562393136356364303830383934353032336231613436 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.599000 audit: BPF prog-id=77 op=LOAD Oct 2 19:11:11.599000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000983a8 items=0 ppid=1716 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465343236393562393136356364303830383934353032336231613436 Oct 2 19:11:11.600000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:11:11.600000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:11:11.600000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.600000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.600000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.600000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.600000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.600000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.600000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.600000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.600000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.600000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.600000 audit: BPF prog-id=78 op=LOAD Oct 2 19:11:11.600000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000987b8 items=0 ppid=1716 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465343236393562393136356364303830383934353032336231613436 Oct 2 19:11:11.624897 env[1105]: time="2023-10-02T19:11:11.623039465Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b619222ebfcfd1a0c9478200f0921497,Namespace:kube-system,Attempt:0,} returns sandbox id \"34031a326b53d83f3cef15ca47f12c08000455df2c69cd614e437c38cd0a327a\"" Oct 2 19:11:11.625051 kubelet[1640]: E1002 19:11:11.624160 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:11.626504 env[1105]: time="2023-10-02T19:11:11.626483284Z" level=info msg="CreateContainer within sandbox \"34031a326b53d83f3cef15ca47f12c08000455df2c69cd614e437c38cd0a327a\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:11:11.634667 env[1105]: time="2023-10-02T19:11:11.634622150Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:fcfc7281b1bedb0e571f1c99bf795af5,Namespace:kube-system,Attempt:0,} returns sandbox id \"db5d91c1201e590e4cf702fb2c0c5f8da3499dd7631a3e62a0288969bdbdc280\"" Oct 2 19:11:11.635436 kubelet[1640]: E1002 19:11:11.635415 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:11.638061 env[1105]: time="2023-10-02T19:11:11.638038839Z" level=info msg="CreateContainer within sandbox \"db5d91c1201e590e4cf702fb2c0c5f8da3499dd7631a3e62a0288969bdbdc280\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:11:11.639993 env[1105]: time="2023-10-02T19:11:11.639969440Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:6961ff1365464b1e2d286a48d6c5e40f,Namespace:kube-system,Attempt:0,} returns sandbox id \"4e42695b9165cd0808945023b1a4629e6c39102488b2e6df0b184a8fb65aa695\"" Oct 2 19:11:11.640638 kubelet[1640]: E1002 19:11:11.640605 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:11.642089 env[1105]: time="2023-10-02T19:11:11.642063829Z" level=info msg="CreateContainer within sandbox \"4e42695b9165cd0808945023b1a4629e6c39102488b2e6df0b184a8fb65aa695\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:11:11.649053 env[1105]: time="2023-10-02T19:11:11.649008435Z" level=info msg="CreateContainer within sandbox \"34031a326b53d83f3cef15ca47f12c08000455df2c69cd614e437c38cd0a327a\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"8da26e1cae22446a7a65cf6a1345b738acabe6687a19faff54830c3451e21160\"" Oct 2 19:11:11.649784 env[1105]: time="2023-10-02T19:11:11.649762079Z" level=info msg="StartContainer for \"8da26e1cae22446a7a65cf6a1345b738acabe6687a19faff54830c3451e21160\"" Oct 2 19:11:11.662237 env[1105]: time="2023-10-02T19:11:11.662185822Z" level=info msg="CreateContainer within sandbox \"db5d91c1201e590e4cf702fb2c0c5f8da3499dd7631a3e62a0288969bdbdc280\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"d52490eacdea9f19a9c3a6f0787f0984c9cd4df5c9c4dd9d80f843517123a280\"" Oct 2 19:11:11.663020 env[1105]: time="2023-10-02T19:11:11.662992706Z" level=info msg="StartContainer for \"d52490eacdea9f19a9c3a6f0787f0984c9cd4df5c9c4dd9d80f843517123a280\"" Oct 2 19:11:11.665039 systemd[1]: Started cri-containerd-8da26e1cae22446a7a65cf6a1345b738acabe6687a19faff54830c3451e21160.scope. Oct 2 19:11:11.673096 env[1105]: time="2023-10-02T19:11:11.665853371Z" level=info msg="CreateContainer within sandbox \"4e42695b9165cd0808945023b1a4629e6c39102488b2e6df0b184a8fb65aa695\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"b53e30f71e2a587646213a1fb6620c3a64014142a41f1e5e04369f5d799c1973\"" Oct 2 19:11:11.673096 env[1105]: time="2023-10-02T19:11:11.666438208Z" level=info msg="StartContainer for \"b53e30f71e2a587646213a1fb6620c3a64014142a41f1e5e04369f5d799c1973\"" Oct 2 19:11:11.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.684000 audit: BPF prog-id=79 op=LOAD Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1682 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864613236653163616532323434366137613635636636613133343562 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1682 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864613236653163616532323434366137613635636636613133343562 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit: BPF prog-id=80 op=LOAD Oct 2 19:11:11.685000 audit[1808]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001fcec0 items=0 ppid=1682 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864613236653163616532323434366137613635636636613133343562 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit: BPF prog-id=81 op=LOAD Oct 2 19:11:11.685000 audit[1808]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001fcf08 items=0 ppid=1682 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864613236653163616532323434366137613635636636613133343562 Oct 2 19:11:11.685000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:11:11.685000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.685000 audit: BPF prog-id=82 op=LOAD Oct 2 19:11:11.685000 audit[1808]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001fd318 items=0 ppid=1682 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864613236653163616532323434366137613635636636613133343562 Oct 2 19:11:11.693397 systemd[1]: Started cri-containerd-b53e30f71e2a587646213a1fb6620c3a64014142a41f1e5e04369f5d799c1973.scope. Oct 2 19:11:11.698560 systemd[1]: Started cri-containerd-d52490eacdea9f19a9c3a6f0787f0984c9cd4df5c9c4dd9d80f843517123a280.scope. Oct 2 19:11:11.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.739000 audit: BPF prog-id=83 op=LOAD Oct 2 19:11:11.739000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.739000 audit[1842]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=1704 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435323439306561636465613966313961396333613666303738376630 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=1704 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435323439306561636465613966313961396333613666303738376630 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit: BPF prog-id=84 op=LOAD Oct 2 19:11:11.740000 audit[1842]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c000097760 items=0 ppid=1704 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435323439306561636465613966313961396333613666303738376630 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit: BPF prog-id=85 op=LOAD Oct 2 19:11:11.740000 audit[1842]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c0000977a8 items=0 ppid=1704 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435323439306561636465613966313961396333613666303738376630 Oct 2 19:11:11.740000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:11:11.740000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.740000 audit: BPF prog-id=86 op=LOAD Oct 2 19:11:11.740000 audit[1842]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c000097bb8 items=0 ppid=1704 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435323439306561636465613966313961396333613666303738376630 Oct 2 19:11:11.743986 env[1105]: time="2023-10-02T19:11:11.743918098Z" level=info msg="StartContainer for \"8da26e1cae22446a7a65cf6a1345b738acabe6687a19faff54830c3451e21160\" returns successfully" Oct 2 19:11:11.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit: BPF prog-id=87 op=LOAD Oct 2 19:11:11.751000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1843]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1716 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235336533306637316532613538373634363231336131666236363230 Oct 2 19:11:11.751000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1843]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1716 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235336533306637316532613538373634363231336131666236363230 Oct 2 19:11:11.751000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.751000 audit: BPF prog-id=88 op=LOAD Oct 2 19:11:11.751000 audit[1843]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000098600 items=0 ppid=1716 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235336533306637316532613538373634363231336131666236363230 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit: BPF prog-id=89 op=LOAD Oct 2 19:11:11.752000 audit[1843]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000098648 items=0 ppid=1716 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.752000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235336533306637316532613538373634363231336131666236363230 Oct 2 19:11:11.752000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:11:11.752000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:11.752000 audit: BPF prog-id=90 op=LOAD Oct 2 19:11:11.752000 audit[1843]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000098a58 items=0 ppid=1716 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.752000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235336533306637316532613538373634363231336131666236363230 Oct 2 19:11:11.784148 env[1105]: time="2023-10-02T19:11:11.784063119Z" level=info msg="StartContainer for \"b53e30f71e2a587646213a1fb6620c3a64014142a41f1e5e04369f5d799c1973\" returns successfully" Oct 2 19:11:11.784332 env[1105]: time="2023-10-02T19:11:11.784092023Z" level=info msg="StartContainer for \"d52490eacdea9f19a9c3a6f0787f0984c9cd4df5c9c4dd9d80f843517123a280\" returns successfully" Oct 2 19:11:11.954593 kubelet[1640]: I1002 19:11:11.954551 1640 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:11:12.411000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:12.411000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a79b00 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:11:12.411000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:12.413000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:12.413000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001236020 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:11:12.413000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:12.481622 kubelet[1640]: E1002 19:11:12.481590 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:12.483141 kubelet[1640]: E1002 19:11:12.483123 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:12.484418 kubelet[1640]: E1002 19:11:12.484404 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:13.056000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:13.056000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:13.056000 audit[1862]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c004b31180 a2=fc6 a3=0 items=0 ppid=1704 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 key=(null) Oct 2 19:11:13.056000 audit[1862]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c0031ea8d0 a2=fc6 a3=0 items=0 ppid=1704 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 key=(null) Oct 2 19:11:13.056000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:11:13.056000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:11:13.056000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:13.056000 audit[1862]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c003d62060 a2=fc6 a3=0 items=0 ppid=1704 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 key=(null) Oct 2 19:11:13.056000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:11:13.066000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4783 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:13.066000 audit[1862]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c004154690 a2=fc6 a3=0 items=0 ppid=1704 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 key=(null) Oct 2 19:11:13.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:11:13.122000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:13.122000 audit[1862]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c004a2b4e0 a2=fc6 a3=0 items=0 ppid=1704 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 key=(null) Oct 2 19:11:13.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:11:13.122000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:13.122000 audit[1862]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c00433f5f0 a2=fc6 a3=0 items=0 ppid=1704 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 key=(null) Oct 2 19:11:13.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:11:13.132063 kubelet[1640]: E1002 19:11:13.132013 1640 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 19:11:13.192748 kubelet[1640]: I1002 19:11:13.192702 1640 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:11:13.200116 kubelet[1640]: E1002 19:11:13.200073 1640 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:11:13.300822 kubelet[1640]: E1002 19:11:13.300779 1640 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:11:13.401467 kubelet[1640]: E1002 19:11:13.401327 1640 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:11:13.486661 kubelet[1640]: E1002 19:11:13.486629 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:13.502516 kubelet[1640]: E1002 19:11:13.502472 1640 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:11:13.603163 kubelet[1640]: E1002 19:11:13.603107 1640 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:11:13.703659 kubelet[1640]: E1002 19:11:13.703589 1640 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:11:13.760708 kubelet[1640]: E1002 19:11:13.760663 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:13.804618 kubelet[1640]: E1002 19:11:13.804554 1640 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:11:13.905030 kubelet[1640]: E1002 19:11:13.904968 1640 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:11:14.006091 kubelet[1640]: E1002 19:11:14.005922 1640 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:11:14.212560 kubelet[1640]: E1002 19:11:14.212530 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:14.441138 kubelet[1640]: I1002 19:11:14.441092 1640 apiserver.go:52] "Watching apiserver" Oct 2 19:11:14.447734 kubelet[1640]: I1002 19:11:14.447697 1640 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:11:14.487453 kubelet[1640]: E1002 19:11:14.487421 1640 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:15.746402 systemd[1]: Reloading. Oct 2 19:11:15.817787 /usr/lib/systemd/system-generators/torcx-generator[1941]: time="2023-10-02T19:11:15Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:11:15.817827 /usr/lib/systemd/system-generators/torcx-generator[1941]: time="2023-10-02T19:11:15Z" level=info msg="torcx already run" Oct 2 19:11:15.917547 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:11:15.917568 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:11:15.942095 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:11:16.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.016182 kernel: kauditd_printk_skb: 581 callbacks suppressed Oct 2 19:11:16.016317 kernel: audit: type=1400 audit(1696273876.005:695): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.016345 kernel: audit: type=1400 audit(1696273876.005:696): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.016365 kernel: audit: type=1400 audit(1696273876.005:697): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.016384 kernel: audit: type=1400 audit(1696273876.005:698): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.019121 kernel: audit: type=1400 audit(1696273876.005:699): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.019209 kernel: audit: type=1400 audit(1696273876.005:700): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.021312 kernel: audit: type=1400 audit(1696273876.005:701): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.023414 kernel: audit: type=1400 audit(1696273876.005:702): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.025496 kernel: audit: type=1400 audit(1696273876.008:703): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027639 kernel: audit: type=1334 audit(1696273876.008:704): prog-id=91 op=LOAD Oct 2 19:11:16.008000 audit: BPF prog-id=91 op=LOAD Oct 2 19:11:16.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.013000 audit: BPF prog-id=92 op=LOAD Oct 2 19:11:16.013000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:11:16.013000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:11:16.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.015000 audit: BPF prog-id=93 op=LOAD Oct 2 19:11:16.015000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:11:16.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.018000 audit: BPF prog-id=94 op=LOAD Oct 2 19:11:16.018000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:11:16.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.022000 audit: BPF prog-id=95 op=LOAD Oct 2 19:11:16.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.026000 audit: BPF prog-id=96 op=LOAD Oct 2 19:11:16.026000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:11:16.026000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit: BPF prog-id=97 op=LOAD Oct 2 19:11:16.027000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit: BPF prog-id=98 op=LOAD Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.027000 audit: BPF prog-id=99 op=LOAD Oct 2 19:11:16.027000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:11:16.027000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:11:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.028000 audit: BPF prog-id=100 op=LOAD Oct 2 19:11:16.028000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:11:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit: BPF prog-id=101 op=LOAD Oct 2 19:11:16.029000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.030000 audit: BPF prog-id=102 op=LOAD Oct 2 19:11:16.030000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:11:16.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit: BPF prog-id=103 op=LOAD Oct 2 19:11:16.031000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit: BPF prog-id=104 op=LOAD Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit: BPF prog-id=105 op=LOAD Oct 2 19:11:16.031000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:11:16.031000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.032000 audit: BPF prog-id=106 op=LOAD Oct 2 19:11:16.032000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:11:16.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.032000 audit: BPF prog-id=107 op=LOAD Oct 2 19:11:16.032000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit: BPF prog-id=108 op=LOAD Oct 2 19:11:16.033000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.033000 audit: BPF prog-id=109 op=LOAD Oct 2 19:11:16.033000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:11:16.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.035000 audit: BPF prog-id=110 op=LOAD Oct 2 19:11:16.035000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:11:16.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.036000 audit: BPF prog-id=111 op=LOAD Oct 2 19:11:16.036000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:11:16.048287 systemd[1]: Stopping kubelet.service... Oct 2 19:11:16.071197 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:11:16.071376 systemd[1]: Stopped kubelet.service. Oct 2 19:11:16.070000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:16.073143 systemd[1]: Started kubelet.service. Oct 2 19:11:16.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:16.116893 kubelet[1982]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:11:16.116893 kubelet[1982]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:11:16.117223 kubelet[1982]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:11:16.117223 kubelet[1982]: I1002 19:11:16.116958 1982 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:11:16.121251 kubelet[1982]: I1002 19:11:16.121213 1982 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:11:16.121306 kubelet[1982]: I1002 19:11:16.121255 1982 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:11:16.121528 kubelet[1982]: I1002 19:11:16.121507 1982 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:11:16.124838 kubelet[1982]: I1002 19:11:16.124807 1982 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:11:16.125822 kubelet[1982]: I1002 19:11:16.125797 1982 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:11:16.131674 kubelet[1982]: I1002 19:11:16.131659 1982 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:11:16.131939 kubelet[1982]: I1002 19:11:16.131927 1982 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:11:16.132150 kubelet[1982]: I1002 19:11:16.132134 1982 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:11:16.132271 kubelet[1982]: I1002 19:11:16.132257 1982 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:11:16.132349 kubelet[1982]: I1002 19:11:16.132335 1982 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:11:16.132444 kubelet[1982]: I1002 19:11:16.132432 1982 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:11:16.132574 kubelet[1982]: I1002 19:11:16.132563 1982 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:11:16.132672 kubelet[1982]: I1002 19:11:16.132653 1982 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:11:16.132766 kubelet[1982]: I1002 19:11:16.132750 1982 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:11:16.132863 kubelet[1982]: I1002 19:11:16.132846 1982 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:11:16.133638 kubelet[1982]: I1002 19:11:16.133622 1982 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:11:16.134694 kubelet[1982]: I1002 19:11:16.134641 1982 server.go:1232] "Started kubelet" Oct 2 19:11:16.137251 kubelet[1982]: E1002 19:11:16.137224 1982 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:11:16.137251 kubelet[1982]: E1002 19:11:16.137253 1982 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:11:16.137000 audit[1982]: AVC avc: denied { mac_admin } for pid=1982 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.137000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:11:16.137000 audit[1982]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009e0510 a1=c00055b278 a2=c0009e04e0 a3=25 items=0 ppid=1 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:16.137000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:11:16.138924 kubelet[1982]: I1002 19:11:16.138907 1982 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:11:16.138000 audit[1982]: AVC avc: denied { mac_admin } for pid=1982 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.138000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:11:16.138000 audit[1982]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00085fa00 a1=c00055b290 a2=c0009e05a0 a3=25 items=0 ppid=1 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:16.138000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:11:16.139535 kubelet[1982]: I1002 19:11:16.139517 1982 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:11:16.139701 kubelet[1982]: I1002 19:11:16.139686 1982 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:11:16.142163 kubelet[1982]: I1002 19:11:16.142124 1982 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:11:16.142250 kubelet[1982]: I1002 19:11:16.142234 1982 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:11:16.142422 kubelet[1982]: I1002 19:11:16.142383 1982 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:11:16.142827 kubelet[1982]: I1002 19:11:16.142809 1982 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:11:16.143629 kubelet[1982]: I1002 19:11:16.143608 1982 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:11:16.144998 kubelet[1982]: I1002 19:11:16.144978 1982 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:11:16.145355 kubelet[1982]: I1002 19:11:16.145332 1982 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:11:16.157102 kubelet[1982]: I1002 19:11:16.157060 1982 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:11:16.158512 kubelet[1982]: I1002 19:11:16.158498 1982 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:11:16.158567 kubelet[1982]: I1002 19:11:16.158518 1982 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:11:16.158567 kubelet[1982]: I1002 19:11:16.158535 1982 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:11:16.158610 kubelet[1982]: E1002 19:11:16.158575 1982 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:11:16.185027 kubelet[1982]: I1002 19:11:16.184989 1982 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:11:16.185027 kubelet[1982]: I1002 19:11:16.185009 1982 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:11:16.185027 kubelet[1982]: I1002 19:11:16.185025 1982 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:11:16.185274 kubelet[1982]: I1002 19:11:16.185175 1982 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:11:16.185274 kubelet[1982]: I1002 19:11:16.185195 1982 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 19:11:16.185274 kubelet[1982]: I1002 19:11:16.185200 1982 policy_none.go:49] "None policy: Start" Oct 2 19:11:16.185855 kubelet[1982]: I1002 19:11:16.185841 1982 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:11:16.185855 kubelet[1982]: I1002 19:11:16.185856 1982 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:11:16.185994 kubelet[1982]: I1002 19:11:16.185979 1982 state_mem.go:75] "Updated machine memory state" Oct 2 19:11:16.189363 kubelet[1982]: I1002 19:11:16.189337 1982 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:11:16.188000 audit[1982]: AVC avc: denied { mac_admin } for pid=1982 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:16.188000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:11:16.188000 audit[1982]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ba6bd0 a1=c000f22078 a2=c000ba6b70 a3=25 items=0 ppid=1 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:16.188000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:11:16.189638 kubelet[1982]: I1002 19:11:16.189420 1982 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:11:16.189638 kubelet[1982]: I1002 19:11:16.189606 1982 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:11:16.245311 kubelet[1982]: I1002 19:11:16.245276 1982 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:11:16.259602 kubelet[1982]: I1002 19:11:16.259554 1982 topology_manager.go:215] "Topology Admit Handler" podUID="fcfc7281b1bedb0e571f1c99bf795af5" podNamespace="kube-system" podName="kube-apiserver-localhost" Oct 2 19:11:16.259783 kubelet[1982]: I1002 19:11:16.259659 1982 topology_manager.go:215] "Topology Admit Handler" podUID="6961ff1365464b1e2d286a48d6c5e40f" podNamespace="kube-system" podName="kube-controller-manager-localhost" Oct 2 19:11:16.259783 kubelet[1982]: I1002 19:11:16.259693 1982 topology_manager.go:215] "Topology Admit Handler" podUID="b619222ebfcfd1a0c9478200f0921497" podNamespace="kube-system" podName="kube-scheduler-localhost" Oct 2 19:11:16.335950 kubelet[1982]: E1002 19:11:16.335811 1982 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:16.340531 kubelet[1982]: I1002 19:11:16.340493 1982 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:11:16.340601 kubelet[1982]: I1002 19:11:16.340590 1982 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:11:16.443335 kubelet[1982]: I1002 19:11:16.443281 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fcfc7281b1bedb0e571f1c99bf795af5-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"fcfc7281b1bedb0e571f1c99bf795af5\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:11:16.443335 kubelet[1982]: I1002 19:11:16.443326 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:16.443335 kubelet[1982]: I1002 19:11:16.443347 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:16.443612 kubelet[1982]: I1002 19:11:16.443369 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:16.443612 kubelet[1982]: I1002 19:11:16.443406 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b619222ebfcfd1a0c9478200f0921497-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b619222ebfcfd1a0c9478200f0921497\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:11:16.443612 kubelet[1982]: I1002 19:11:16.443462 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fcfc7281b1bedb0e571f1c99bf795af5-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"fcfc7281b1bedb0e571f1c99bf795af5\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:11:16.443612 kubelet[1982]: I1002 19:11:16.443510 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fcfc7281b1bedb0e571f1c99bf795af5-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"fcfc7281b1bedb0e571f1c99bf795af5\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:11:16.443612 kubelet[1982]: I1002 19:11:16.443532 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:16.443756 kubelet[1982]: I1002 19:11:16.443550 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:16.634911 kubelet[1982]: E1002 19:11:16.634770 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:16.635340 kubelet[1982]: E1002 19:11:16.635318 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:16.637055 kubelet[1982]: E1002 19:11:16.637014 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:17.133654 kubelet[1982]: I1002 19:11:17.133615 1982 apiserver.go:52] "Watching apiserver" Oct 2 19:11:17.143371 kubelet[1982]: I1002 19:11:17.143329 1982 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:11:17.168619 kubelet[1982]: E1002 19:11:17.168575 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:17.168759 kubelet[1982]: E1002 19:11:17.168685 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:17.248506 kubelet[1982]: E1002 19:11:17.248440 1982 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:11:17.249436 kubelet[1982]: E1002 19:11:17.249423 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:17.268000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:17.268000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0006581e0 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:11:17.268000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:17.269000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:17.269000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0006588c0 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:11:17.269000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:17.270000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:17.270000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0000d7c60 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:11:17.270000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:17.270000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:17.270000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001236b60 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:11:17.270000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:17.314722 kubelet[1982]: I1002 19:11:17.314674 1982 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.314622798 podCreationTimestamp="2023-10-02 19:11:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:11:17.276268687 +0000 UTC m=+1.199485114" watchObservedRunningTime="2023-10-02 19:11:17.314622798 +0000 UTC m=+1.237839235" Oct 2 19:11:17.324087 kubelet[1982]: I1002 19:11:17.324049 1982 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.323989461 podCreationTimestamp="2023-10-02 19:11:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:11:17.315619299 +0000 UTC m=+1.238835726" watchObservedRunningTime="2023-10-02 19:11:17.323989461 +0000 UTC m=+1.247205888" Oct 2 19:11:17.359000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32587 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:11:17.359000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000d0c3c0 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:11:17.359000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:18.170277 kubelet[1982]: E1002 19:11:18.170243 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:19.274267 sudo[1232]: pam_unix(sudo:session): session closed for user root Oct 2 19:11:19.273000 audit[1232]: USER_END pid=1232 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:11:19.273000 audit[1232]: CRED_DISP pid=1232 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:11:19.277095 sshd[1229]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:19.277000 audit[1229]: USER_END pid=1229 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:19.277000 audit[1229]: CRED_DISP pid=1229 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:19.279670 systemd[1]: sshd@6-10.0.0.69:22-10.0.0.1:58572.service: Deactivated successfully. Oct 2 19:11:19.280522 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:11:19.280703 systemd[1]: session-7.scope: Consumed 3.794s CPU time. Oct 2 19:11:19.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.69:22-10.0.0.1:58572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:19.281170 systemd-logind[1090]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:11:19.281864 systemd-logind[1090]: Removed session 7. Oct 2 19:11:23.794548 kubelet[1982]: E1002 19:11:23.794511 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:23.814020 kubelet[1982]: I1002 19:11:23.813994 1982 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=9.813940032 podCreationTimestamp="2023-10-02 19:11:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:11:17.324413755 +0000 UTC m=+1.247630182" watchObservedRunningTime="2023-10-02 19:11:23.813940032 +0000 UTC m=+7.737156459" Oct 2 19:11:24.178446 kubelet[1982]: E1002 19:11:24.178411 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:26.153465 kubelet[1982]: E1002 19:11:26.153419 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:26.181653 kubelet[1982]: E1002 19:11:26.181619 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:26.352680 kubelet[1982]: E1002 19:11:26.352646 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:27.185448 kubelet[1982]: E1002 19:11:27.184466 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:28.505643 update_engine[1093]: I1002 19:11:28.505584 1093 update_attempter.cc:505] Updating boot flags... Oct 2 19:11:30.033800 kubelet[1982]: I1002 19:11:30.033775 1982 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:11:30.034578 env[1105]: time="2023-10-02T19:11:30.034533540Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:11:30.035333 kubelet[1982]: I1002 19:11:30.035299 1982 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:11:30.517896 kubelet[1982]: I1002 19:11:30.517845 1982 topology_manager.go:215] "Topology Admit Handler" podUID="3a71fe54-eaf7-4c7b-885d-c7b775f37920" podNamespace="kube-system" podName="kube-proxy-8n75f" Oct 2 19:11:30.523311 systemd[1]: Created slice kubepods-besteffort-pod3a71fe54_eaf7_4c7b_885d_c7b775f37920.slice. Oct 2 19:11:30.546397 kubelet[1982]: I1002 19:11:30.546354 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3a71fe54-eaf7-4c7b-885d-c7b775f37920-lib-modules\") pod \"kube-proxy-8n75f\" (UID: \"3a71fe54-eaf7-4c7b-885d-c7b775f37920\") " pod="kube-system/kube-proxy-8n75f" Oct 2 19:11:30.546397 kubelet[1982]: I1002 19:11:30.546392 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hp77d\" (UniqueName: \"kubernetes.io/projected/3a71fe54-eaf7-4c7b-885d-c7b775f37920-kube-api-access-hp77d\") pod \"kube-proxy-8n75f\" (UID: \"3a71fe54-eaf7-4c7b-885d-c7b775f37920\") " pod="kube-system/kube-proxy-8n75f" Oct 2 19:11:30.546584 kubelet[1982]: I1002 19:11:30.546412 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3a71fe54-eaf7-4c7b-885d-c7b775f37920-xtables-lock\") pod \"kube-proxy-8n75f\" (UID: \"3a71fe54-eaf7-4c7b-885d-c7b775f37920\") " pod="kube-system/kube-proxy-8n75f" Oct 2 19:11:30.546584 kubelet[1982]: I1002 19:11:30.546431 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/3a71fe54-eaf7-4c7b-885d-c7b775f37920-kube-proxy\") pod \"kube-proxy-8n75f\" (UID: \"3a71fe54-eaf7-4c7b-885d-c7b775f37920\") " pod="kube-system/kube-proxy-8n75f" Oct 2 19:11:30.706185 kubelet[1982]: E1002 19:11:30.706139 1982 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:11:30.706185 kubelet[1982]: E1002 19:11:30.706173 1982 projected.go:198] Error preparing data for projected volume kube-api-access-hp77d for pod kube-system/kube-proxy-8n75f: configmap "kube-root-ca.crt" not found Oct 2 19:11:30.706395 kubelet[1982]: E1002 19:11:30.706242 1982 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/3a71fe54-eaf7-4c7b-885d-c7b775f37920-kube-api-access-hp77d podName:3a71fe54-eaf7-4c7b-885d-c7b775f37920 nodeName:}" failed. No retries permitted until 2023-10-02 19:11:31.206218446 +0000 UTC m=+15.129434873 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-hp77d" (UniqueName: "kubernetes.io/projected/3a71fe54-eaf7-4c7b-885d-c7b775f37920-kube-api-access-hp77d") pod "kube-proxy-8n75f" (UID: "3a71fe54-eaf7-4c7b-885d-c7b775f37920") : configmap "kube-root-ca.crt" not found Oct 2 19:11:31.080903 kubelet[1982]: I1002 19:11:31.080824 1982 topology_manager.go:215] "Topology Admit Handler" podUID="c5ad78e9-3b82-4eb8-972e-3447fb65aac2" podNamespace="tigera-operator" podName="tigera-operator-8547bd6cc6-vqnqg" Oct 2 19:11:31.086464 systemd[1]: Created slice kubepods-besteffort-podc5ad78e9_3b82_4eb8_972e_3447fb65aac2.slice. Oct 2 19:11:31.150895 kubelet[1982]: I1002 19:11:31.150841 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-blz26\" (UniqueName: \"kubernetes.io/projected/c5ad78e9-3b82-4eb8-972e-3447fb65aac2-kube-api-access-blz26\") pod \"tigera-operator-8547bd6cc6-vqnqg\" (UID: \"c5ad78e9-3b82-4eb8-972e-3447fb65aac2\") " pod="tigera-operator/tigera-operator-8547bd6cc6-vqnqg" Oct 2 19:11:31.151048 kubelet[1982]: I1002 19:11:31.150929 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/c5ad78e9-3b82-4eb8-972e-3447fb65aac2-var-lib-calico\") pod \"tigera-operator-8547bd6cc6-vqnqg\" (UID: \"c5ad78e9-3b82-4eb8-972e-3447fb65aac2\") " pod="tigera-operator/tigera-operator-8547bd6cc6-vqnqg" Oct 2 19:11:31.389369 env[1105]: time="2023-10-02T19:11:31.389268514Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-8547bd6cc6-vqnqg,Uid:c5ad78e9-3b82-4eb8-972e-3447fb65aac2,Namespace:tigera-operator,Attempt:0,}" Oct 2 19:11:31.439092 kubelet[1982]: E1002 19:11:31.439055 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:31.439886 env[1105]: time="2023-10-02T19:11:31.439804835Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-8n75f,Uid:3a71fe54-eaf7-4c7b-885d-c7b775f37920,Namespace:kube-system,Attempt:0,}" Oct 2 19:11:31.656313 env[1105]: time="2023-10-02T19:11:31.655997688Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:11:31.656437 env[1105]: time="2023-10-02T19:11:31.656047673Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:11:31.656437 env[1105]: time="2023-10-02T19:11:31.656062210Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:11:31.656437 env[1105]: time="2023-10-02T19:11:31.656163893Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0 pid=2091 runtime=io.containerd.runc.v2 Oct 2 19:11:31.659581 env[1105]: time="2023-10-02T19:11:31.659507712Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:11:31.659730 env[1105]: time="2023-10-02T19:11:31.659561614Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:11:31.659730 env[1105]: time="2023-10-02T19:11:31.659572324Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:11:31.660255 env[1105]: time="2023-10-02T19:11:31.660201575Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b977350293dffa72d52533fb18900957148d0f593c88279242a395c4e6e3064e pid=2105 runtime=io.containerd.runc.v2 Oct 2 19:11:31.670903 systemd[1]: Started cri-containerd-b977350293dffa72d52533fb18900957148d0f593c88279242a395c4e6e3064e.scope. Oct 2 19:11:31.674667 systemd[1]: Started cri-containerd-a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0.scope. Oct 2 19:11:31.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.685956 kernel: kauditd_printk_skb: 272 callbacks suppressed Oct 2 19:11:31.686035 kernel: audit: type=1400 audit(1696273891.681:952): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686084 kernel: audit: type=1400 audit(1696273891.681:953): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.690905 kernel: audit: type=1400 audit(1696273891.681:954): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691033 kernel: audit: type=1400 audit(1696273891.681:955): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.694456 kernel: audit: type=1400 audit(1696273891.681:956): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.694509 kernel: audit: type=1400 audit(1696273891.681:957): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.698855 kernel: audit: type=1400 audit(1696273891.681:958): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.698936 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:11:31.698966 kernel: audit: type=1400 audit(1696273891.681:959): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.699602 kernel: audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:11:31.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.682000 audit: BPF prog-id=112 op=LOAD Oct 2 19:11:31.686000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686000 audit[2115]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2105 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239373733353032393364666661373264353235333366623138393030 Oct 2 19:11:31.686000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686000 audit[2115]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2105 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239373733353032393364666661373264353235333366623138393030 Oct 2 19:11:31.686000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.686000 audit: BPF prog-id=113 op=LOAD Oct 2 19:11:31.686000 audit[2115]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003b81c0 items=0 ppid=2105 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239373733353032393364666661373264353235333366623138393030 Oct 2 19:11:31.687000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.687000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.687000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.687000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.687000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.687000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.687000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.687000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.687000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.687000 audit: BPF prog-id=114 op=LOAD Oct 2 19:11:31.687000 audit[2115]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003b8208 items=0 ppid=2105 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239373733353032393364666661373264353235333366623138393030 Oct 2 19:11:31.691000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:11:31.691000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:11:31.691000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[2115]: AVC avc: denied { perfmon } for pid=2115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.693000 audit: BPF prog-id=115 op=LOAD Oct 2 19:11:31.693000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.693000 audit[2113]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2091 pid=2113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133393865656336313432313730663632346332306663343337353334 Oct 2 19:11:31.691000 audit[2115]: AVC avc: denied { bpf } for pid=2115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.691000 audit[2115]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003b8618 items=0 ppid=2105 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2091 pid=2113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133393865656336313432313730663632346332306663343337353334 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit: BPF prog-id=117 op=LOAD Oct 2 19:11:31.702000 audit[2113]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00039c500 items=0 ppid=2091 pid=2113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133393865656336313432313730663632346332306663343337353334 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit: BPF prog-id=118 op=LOAD Oct 2 19:11:31.702000 audit[2113]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00039c548 items=0 ppid=2091 pid=2113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133393865656336313432313730663632346332306663343337353334 Oct 2 19:11:31.702000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:11:31.702000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { perfmon } for pid=2113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit[2113]: AVC avc: denied { bpf } for pid=2113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.702000 audit: BPF prog-id=119 op=LOAD Oct 2 19:11:31.702000 audit[2113]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00039c958 items=0 ppid=2091 pid=2113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133393865656336313432313730663632346332306663343337353334 Oct 2 19:11:31.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239373733353032393364666661373264353235333366623138393030 Oct 2 19:11:31.716453 env[1105]: time="2023-10-02T19:11:31.716415643Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-8n75f,Uid:3a71fe54-eaf7-4c7b-885d-c7b775f37920,Namespace:kube-system,Attempt:0,} returns sandbox id \"b977350293dffa72d52533fb18900957148d0f593c88279242a395c4e6e3064e\"" Oct 2 19:11:31.718511 kubelet[1982]: E1002 19:11:31.717164 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:31.719712 env[1105]: time="2023-10-02T19:11:31.719658370Z" level=info msg="CreateContainer within sandbox \"b977350293dffa72d52533fb18900957148d0f593c88279242a395c4e6e3064e\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:11:31.734746 env[1105]: time="2023-10-02T19:11:31.734692235Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-8547bd6cc6-vqnqg,Uid:c5ad78e9-3b82-4eb8-972e-3447fb65aac2,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\"" Oct 2 19:11:31.736281 env[1105]: time="2023-10-02T19:11:31.736091363Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 19:11:31.744999 env[1105]: time="2023-10-02T19:11:31.744954248Z" level=info msg="CreateContainer within sandbox \"b977350293dffa72d52533fb18900957148d0f593c88279242a395c4e6e3064e\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"aee47f8a0d2496583fc3724b222dcda72f53d6321d207747287b93081cec80b5\"" Oct 2 19:11:31.745621 env[1105]: time="2023-10-02T19:11:31.745598217Z" level=info msg="StartContainer for \"aee47f8a0d2496583fc3724b222dcda72f53d6321d207747287b93081cec80b5\"" Oct 2 19:11:31.760789 systemd[1]: Started cri-containerd-aee47f8a0d2496583fc3724b222dcda72f53d6321d207747287b93081cec80b5.scope. Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2105 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165653437663861306432343936353833666333373234623232326463 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit: BPF prog-id=120 op=LOAD Oct 2 19:11:31.785000 audit[2171]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00028acb0 items=0 ppid=2105 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165653437663861306432343936353833666333373234623232326463 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit: BPF prog-id=121 op=LOAD Oct 2 19:11:31.785000 audit[2171]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00028acf8 items=0 ppid=2105 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165653437663861306432343936353833666333373234623232326463 Oct 2 19:11:31.785000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:11:31.785000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { perfmon } for pid=2171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit[2171]: AVC avc: denied { bpf } for pid=2171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:31.785000 audit: BPF prog-id=122 op=LOAD Oct 2 19:11:31.785000 audit[2171]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00028ad88 items=0 ppid=2105 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165653437663861306432343936353833666333373234623232326463 Oct 2 19:11:31.848531 env[1105]: time="2023-10-02T19:11:31.848458473Z" level=info msg="StartContainer for \"aee47f8a0d2496583fc3724b222dcda72f53d6321d207747287b93081cec80b5\" returns successfully" Oct 2 19:11:31.856000 audit[2224]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:31.856000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdf74dd9b0 a2=0 a3=7ffdf74dd99c items=0 ppid=2181 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.856000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:11:31.856000 audit[2223]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.856000 audit[2223]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff3bac01c0 a2=0 a3=7fff3bac01ac items=0 ppid=2181 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.856000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:11:31.858000 audit[2225]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:31.858000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd0216c760 a2=0 a3=7ffd0216c74c items=0 ppid=2181 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.858000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:11:31.859000 audit[2226]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.859000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe840260c0 a2=0 a3=7ffe840260ac items=0 ppid=2181 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.859000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:11:31.860000 audit[2227]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:31.860000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd88d7e930 a2=0 a3=7ffd88d7e91c items=0 ppid=2181 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.860000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:11:31.860000 audit[2228]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.860000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe8825ab80 a2=0 a3=7ffe8825ab6c items=0 ppid=2181 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.860000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:11:31.957000 audit[2229]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.957000 audit[2229]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc6c8c9700 a2=0 a3=7ffc6c8c96ec items=0 ppid=2181 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.957000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:11:31.958000 audit[2231]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.958000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe0fecbd50 a2=0 a3=7ffe0fecbd3c items=0 ppid=2181 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.958000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:11:31.961000 audit[2234]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.961000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe802866b0 a2=0 a3=7ffe8028669c items=0 ppid=2181 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.961000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:11:31.962000 audit[2235]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.962000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc12d5d810 a2=0 a3=7ffc12d5d7fc items=0 ppid=2181 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.962000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:11:31.964000 audit[2237]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.964000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff8062b740 a2=0 a3=7fff8062b72c items=0 ppid=2181 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.964000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:11:31.965000 audit[2238]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.965000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc7aa6a990 a2=0 a3=7ffc7aa6a97c items=0 ppid=2181 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.965000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:11:31.967000 audit[2240]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.967000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff30ae2360 a2=0 a3=7fff30ae234c items=0 ppid=2181 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.967000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:11:31.970000 audit[2243]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.970000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffeed6c2190 a2=0 a3=7ffeed6c217c items=0 ppid=2181 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.970000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:11:31.971000 audit[2244]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.971000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff345a4130 a2=0 a3=7fff345a411c items=0 ppid=2181 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.971000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:11:31.973000 audit[2246]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.973000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc054be710 a2=0 a3=7ffc054be6fc items=0 ppid=2181 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.973000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:11:31.974000 audit[2247]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.974000 audit[2247]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd9c615770 a2=0 a3=7ffd9c61575c items=0 ppid=2181 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.974000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:11:31.976000 audit[2249]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.976000 audit[2249]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffc66fc7e0 a2=0 a3=7fffc66fc7cc items=0 ppid=2181 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.976000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:11:31.979000 audit[2252]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.979000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffff2698000 a2=0 a3=7ffff2697fec items=0 ppid=2181 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.979000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:11:31.982000 audit[2255]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.982000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc6948dee0 a2=0 a3=7ffc6948decc items=0 ppid=2181 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.982000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:11:31.983000 audit[2256]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.983000 audit[2256]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffff4ffff90 a2=0 a3=7ffff4ffff7c items=0 ppid=2181 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.983000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:11:31.984000 audit[2258]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.984000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffc12e702f0 a2=0 a3=7ffc12e702dc items=0 ppid=2181 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.984000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:11:31.987000 audit[2261]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.987000 audit[2261]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff56630860 a2=0 a3=7fff5663084c items=0 ppid=2181 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.987000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:11:31.988000 audit[2262]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.988000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf346ebf0 a2=0 a3=7ffdf346ebdc items=0 ppid=2181 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.988000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:11:31.990000 audit[2264]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:31.990000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc670ea150 a2=0 a3=7ffc670ea13c items=0 ppid=2181 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:31.990000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:11:32.003000 audit[2270]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2270 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:32.003000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffc851a13f0 a2=0 a3=7ffc851a13dc items=0 ppid=2181 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.003000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:32.008000 audit[2270]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:32.008000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffc851a13f0 a2=0 a3=7ffc851a13dc items=0 ppid=2181 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.008000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:32.012000 audit[2277]: NETFILTER_CFG table=filter:65 family=2 entries=14 op=nft_register_rule pid=2277 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:32.012000 audit[2277]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffd57d0f040 a2=0 a3=7ffd57d0f02c items=0 ppid=2181 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:32.012000 audit[2277]: NETFILTER_CFG table=nat:66 family=2 entries=12 op=nft_register_rule pid=2277 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:32.012000 audit[2277]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffd57d0f040 a2=0 a3=31030 items=0 ppid=2181 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:32.017000 audit[2278]: NETFILTER_CFG table=filter:67 family=10 entries=1 op=nft_register_chain pid=2278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.017000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe64216920 a2=0 a3=7ffe6421690c items=0 ppid=2181 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.017000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:11:32.019000 audit[2280]: NETFILTER_CFG table=filter:68 family=10 entries=2 op=nft_register_chain pid=2280 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.019000 audit[2280]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fffb8197bf0 a2=0 a3=7fffb8197bdc items=0 ppid=2181 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:11:32.028000 audit[2283]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=2283 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.028000 audit[2283]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd1bd2aea0 a2=0 a3=7ffd1bd2ae8c items=0 ppid=2181 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.028000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:11:32.032000 audit[2284]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2284 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.032000 audit[2284]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd6bd881f0 a2=0 a3=7ffd6bd881dc items=0 ppid=2181 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.032000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:11:32.033000 audit[2286]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2286 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.033000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffde1b04360 a2=0 a3=7ffde1b0434c items=0 ppid=2181 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.033000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:11:32.034000 audit[2287]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.034000 audit[2287]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff5f631ac0 a2=0 a3=7fff5f631aac items=0 ppid=2181 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.034000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:11:32.036000 audit[2289]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.036000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc0cc2dbc0 a2=0 a3=7ffc0cc2dbac items=0 ppid=2181 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.036000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:11:32.039000 audit[2292]: NETFILTER_CFG table=filter:74 family=10 entries=2 op=nft_register_chain pid=2292 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.039000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe90a5db50 a2=0 a3=7ffe90a5db3c items=0 ppid=2181 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.039000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:11:32.040000 audit[2293]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.040000 audit[2293]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffedd182290 a2=0 a3=7ffedd18227c items=0 ppid=2181 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.040000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:11:32.041000 audit[2295]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.041000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffeb6730730 a2=0 a3=7ffeb673071c items=0 ppid=2181 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.041000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:11:32.042000 audit[2296]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.042000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe0c798910 a2=0 a3=7ffe0c7988fc items=0 ppid=2181 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.042000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:11:32.044000 audit[2298]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.044000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffffb38f9f0 a2=0 a3=7ffffb38f9dc items=0 ppid=2181 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.044000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:11:32.047000 audit[2301]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.047000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc75736c70 a2=0 a3=7ffc75736c5c items=0 ppid=2181 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.047000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:11:32.049000 audit[2304]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.049000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffed5236980 a2=0 a3=7ffed523696c items=0 ppid=2181 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.049000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:11:32.050000 audit[2305]: NETFILTER_CFG table=nat:81 family=10 entries=1 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.050000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc0ab74d50 a2=0 a3=7ffc0ab74d3c items=0 ppid=2181 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.050000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:11:32.052000 audit[2307]: NETFILTER_CFG table=nat:82 family=10 entries=2 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.052000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fffeba28500 a2=0 a3=7fffeba284ec items=0 ppid=2181 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.052000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:11:32.054000 audit[2310]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.054000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff2d624b90 a2=0 a3=7fff2d624b7c items=0 ppid=2181 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.054000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:11:32.055000 audit[2311]: NETFILTER_CFG table=nat:84 family=10 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.055000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4b28c190 a2=0 a3=7fff4b28c17c items=0 ppid=2181 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.055000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:11:32.057000 audit[2313]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.057000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffde50445c0 a2=0 a3=7ffde50445ac items=0 ppid=2181 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.057000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:11:32.058000 audit[2314]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.058000 audit[2314]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe6503cbc0 a2=0 a3=7ffe6503cbac items=0 ppid=2181 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.058000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:11:32.060000 audit[2316]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_rule pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.060000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe2b348350 a2=0 a3=7ffe2b34833c items=0 ppid=2181 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.060000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:11:32.063000 audit[2319]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:32.063000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcc7365d70 a2=0 a3=7ffcc7365d5c items=0 ppid=2181 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.063000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:11:32.065000 audit[2321]: NETFILTER_CFG table=filter:89 family=10 entries=3 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:11:32.065000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffc2b8f4470 a2=0 a3=7ffc2b8f445c items=0 ppid=2181 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.065000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:32.065000 audit[2321]: NETFILTER_CFG table=nat:90 family=10 entries=7 op=nft_register_chain pid=2321 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:11:32.065000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffc2b8f4470 a2=0 a3=7ffc2b8f445c items=0 ppid=2181 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.065000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:32.193420 kubelet[1982]: E1002 19:11:32.193385 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:32.202032 kubelet[1982]: I1002 19:11:32.201977 1982 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-8n75f" podStartSLOduration=2.201930133 podCreationTimestamp="2023-10-02 19:11:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:11:32.201518245 +0000 UTC m=+16.124734672" watchObservedRunningTime="2023-10-02 19:11:32.201930133 +0000 UTC m=+16.125146580" Oct 2 19:11:34.524204 env[1105]: time="2023-10-02T19:11:34.524161369Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:34.580129 env[1105]: time="2023-10-02T19:11:34.580065893Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:34.584643 env[1105]: time="2023-10-02T19:11:34.584594281Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:34.586674 env[1105]: time="2023-10-02T19:11:34.586627683Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:34.587259 env[1105]: time="2023-10-02T19:11:34.587225353Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1\"" Oct 2 19:11:34.588787 env[1105]: time="2023-10-02T19:11:34.588763800Z" level=info msg="CreateContainer within sandbox \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 19:11:34.601809 env[1105]: time="2023-10-02T19:11:34.601745873Z" level=info msg="CreateContainer within sandbox \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\"" Oct 2 19:11:34.602411 env[1105]: time="2023-10-02T19:11:34.602374470Z" level=info msg="StartContainer for \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\"" Oct 2 19:11:34.618396 systemd[1]: Started cri-containerd-58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c.scope. Oct 2 19:11:34.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.629000 audit: BPF prog-id=123 op=LOAD Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2091 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:34.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538626137656232613666323265646662636436623061336434636130 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2091 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:34.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538626137656232613666323265646662636436623061336434636130 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit: BPF prog-id=124 op=LOAD Oct 2 19:11:34.630000 audit[2329]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003ae0a0 items=0 ppid=2091 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:34.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538626137656232613666323265646662636436623061336434636130 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit: BPF prog-id=125 op=LOAD Oct 2 19:11:34.630000 audit[2329]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ae0e8 items=0 ppid=2091 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:34.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538626137656232613666323265646662636436623061336434636130 Oct 2 19:11:34.630000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:11:34.630000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:34.630000 audit: BPF prog-id=126 op=LOAD Oct 2 19:11:34.630000 audit[2329]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ae4f8 items=0 ppid=2091 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:34.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538626137656232613666323265646662636436623061336434636130 Oct 2 19:11:34.734594 env[1105]: time="2023-10-02T19:11:34.734521462Z" level=info msg="StartContainer for \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\" returns successfully" Oct 2 19:11:35.207992 kubelet[1982]: I1002 19:11:35.207936 1982 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-8547bd6cc6-vqnqg" podStartSLOduration=1.356038013 podCreationTimestamp="2023-10-02 19:11:31 +0000 UTC" firstStartedPulling="2023-10-02 19:11:31.735676298 +0000 UTC m=+15.658892725" lastFinishedPulling="2023-10-02 19:11:34.587534867 +0000 UTC m=+18.510751295" observedRunningTime="2023-10-02 19:11:35.207613778 +0000 UTC m=+19.130830205" watchObservedRunningTime="2023-10-02 19:11:35.207896583 +0000 UTC m=+19.131113010" Oct 2 19:11:36.546000 audit[2361]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:36.546000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffdfa718070 a2=0 a3=7ffdfa71805c items=0 ppid=2181 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:36.546000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:36.547000 audit[2361]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:36.547000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffdfa718070 a2=0 a3=31030 items=0 ppid=2181 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:36.547000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:36.559000 audit[2363]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2363 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:36.559000 audit[2363]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffc60c23bb0 a2=0 a3=7ffc60c23b9c items=0 ppid=2181 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:36.559000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:36.561000 audit[2363]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2363 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:36.561000 audit[2363]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffc60c23bb0 a2=0 a3=31030 items=0 ppid=2181 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:36.561000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:36.885063 kubelet[1982]: I1002 19:11:36.884922 1982 topology_manager.go:215] "Topology Admit Handler" podUID="711f1441-4a9d-459c-8ffe-64b847340a34" podNamespace="calico-system" podName="calico-typha-96fd9cb4d-wlt5l" Oct 2 19:11:36.890802 kubelet[1982]: I1002 19:11:36.889832 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/711f1441-4a9d-459c-8ffe-64b847340a34-typha-certs\") pod \"calico-typha-96fd9cb4d-wlt5l\" (UID: \"711f1441-4a9d-459c-8ffe-64b847340a34\") " pod="calico-system/calico-typha-96fd9cb4d-wlt5l" Oct 2 19:11:36.890802 kubelet[1982]: I1002 19:11:36.889903 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-x9ncr\" (UniqueName: \"kubernetes.io/projected/711f1441-4a9d-459c-8ffe-64b847340a34-kube-api-access-x9ncr\") pod \"calico-typha-96fd9cb4d-wlt5l\" (UID: \"711f1441-4a9d-459c-8ffe-64b847340a34\") " pod="calico-system/calico-typha-96fd9cb4d-wlt5l" Oct 2 19:11:36.890802 kubelet[1982]: I1002 19:11:36.889932 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/711f1441-4a9d-459c-8ffe-64b847340a34-tigera-ca-bundle\") pod \"calico-typha-96fd9cb4d-wlt5l\" (UID: \"711f1441-4a9d-459c-8ffe-64b847340a34\") " pod="calico-system/calico-typha-96fd9cb4d-wlt5l" Oct 2 19:11:36.890652 systemd[1]: Created slice kubepods-besteffort-pod711f1441_4a9d_459c_8ffe_64b847340a34.slice. Oct 2 19:11:36.917735 kubelet[1982]: I1002 19:11:36.917690 1982 topology_manager.go:215] "Topology Admit Handler" podUID="36abc540-f458-4638-ba4c-595593660e40" podNamespace="calico-system" podName="calico-node-85xhn" Oct 2 19:11:36.923303 systemd[1]: Created slice kubepods-besteffort-pod36abc540_f458_4638_ba4c_595593660e40.slice. Oct 2 19:11:36.990612 kubelet[1982]: I1002 19:11:36.990558 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/36abc540-f458-4638-ba4c-595593660e40-cni-net-dir\") pod \"calico-node-85xhn\" (UID: \"36abc540-f458-4638-ba4c-595593660e40\") " pod="calico-system/calico-node-85xhn" Oct 2 19:11:36.990762 kubelet[1982]: I1002 19:11:36.990632 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/36abc540-f458-4638-ba4c-595593660e40-policysync\") pod \"calico-node-85xhn\" (UID: \"36abc540-f458-4638-ba4c-595593660e40\") " pod="calico-system/calico-node-85xhn" Oct 2 19:11:36.990762 kubelet[1982]: I1002 19:11:36.990713 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/36abc540-f458-4638-ba4c-595593660e40-cni-bin-dir\") pod \"calico-node-85xhn\" (UID: \"36abc540-f458-4638-ba4c-595593660e40\") " pod="calico-system/calico-node-85xhn" Oct 2 19:11:36.990863 kubelet[1982]: I1002 19:11:36.990796 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/36abc540-f458-4638-ba4c-595593660e40-cni-log-dir\") pod \"calico-node-85xhn\" (UID: \"36abc540-f458-4638-ba4c-595593660e40\") " pod="calico-system/calico-node-85xhn" Oct 2 19:11:36.990956 kubelet[1982]: I1002 19:11:36.990897 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sqbgj\" (UniqueName: \"kubernetes.io/projected/36abc540-f458-4638-ba4c-595593660e40-kube-api-access-sqbgj\") pod \"calico-node-85xhn\" (UID: \"36abc540-f458-4638-ba4c-595593660e40\") " pod="calico-system/calico-node-85xhn" Oct 2 19:11:36.991011 kubelet[1982]: I1002 19:11:36.990955 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/36abc540-f458-4638-ba4c-595593660e40-node-certs\") pod \"calico-node-85xhn\" (UID: \"36abc540-f458-4638-ba4c-595593660e40\") " pod="calico-system/calico-node-85xhn" Oct 2 19:11:36.991011 kubelet[1982]: I1002 19:11:36.990988 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/36abc540-f458-4638-ba4c-595593660e40-var-run-calico\") pod \"calico-node-85xhn\" (UID: \"36abc540-f458-4638-ba4c-595593660e40\") " pod="calico-system/calico-node-85xhn" Oct 2 19:11:36.991087 kubelet[1982]: I1002 19:11:36.991023 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/36abc540-f458-4638-ba4c-595593660e40-lib-modules\") pod \"calico-node-85xhn\" (UID: \"36abc540-f458-4638-ba4c-595593660e40\") " pod="calico-system/calico-node-85xhn" Oct 2 19:11:36.993892 kubelet[1982]: I1002 19:11:36.991527 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/36abc540-f458-4638-ba4c-595593660e40-var-lib-calico\") pod \"calico-node-85xhn\" (UID: \"36abc540-f458-4638-ba4c-595593660e40\") " pod="calico-system/calico-node-85xhn" Oct 2 19:11:36.993892 kubelet[1982]: I1002 19:11:36.991558 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/36abc540-f458-4638-ba4c-595593660e40-xtables-lock\") pod \"calico-node-85xhn\" (UID: \"36abc540-f458-4638-ba4c-595593660e40\") " pod="calico-system/calico-node-85xhn" Oct 2 19:11:36.993892 kubelet[1982]: I1002 19:11:36.991577 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/36abc540-f458-4638-ba4c-595593660e40-tigera-ca-bundle\") pod \"calico-node-85xhn\" (UID: \"36abc540-f458-4638-ba4c-595593660e40\") " pod="calico-system/calico-node-85xhn" Oct 2 19:11:36.993892 kubelet[1982]: I1002 19:11:36.991596 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/36abc540-f458-4638-ba4c-595593660e40-flexvol-driver-host\") pod \"calico-node-85xhn\" (UID: \"36abc540-f458-4638-ba4c-595593660e40\") " pod="calico-system/calico-node-85xhn" Oct 2 19:11:37.094148 kubelet[1982]: E1002 19:11:37.094085 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:37.094148 kubelet[1982]: W1002 19:11:37.094131 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:37.094148 kubelet[1982]: E1002 19:11:37.094150 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:37.099264 kubelet[1982]: E1002 19:11:37.097889 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:37.099264 kubelet[1982]: W1002 19:11:37.097908 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:37.099264 kubelet[1982]: E1002 19:11:37.097934 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:37.106539 kubelet[1982]: E1002 19:11:37.104580 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:37.106539 kubelet[1982]: W1002 19:11:37.104599 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:37.106539 kubelet[1982]: E1002 19:11:37.104623 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:37.197744 kubelet[1982]: E1002 19:11:37.197696 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:37.198453 env[1105]: time="2023-10-02T19:11:37.198408822Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-96fd9cb4d-wlt5l,Uid:711f1441-4a9d-459c-8ffe-64b847340a34,Namespace:calico-system,Attempt:0,}" Oct 2 19:11:37.225894 kubelet[1982]: E1002 19:11:37.225834 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:37.226469 env[1105]: time="2023-10-02T19:11:37.226417672Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-85xhn,Uid:36abc540-f458-4638-ba4c-595593660e40,Namespace:calico-system,Attempt:0,}" Oct 2 19:11:37.569000 audit[2372]: NETFILTER_CFG table=filter:95 family=2 entries=16 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:37.571151 kernel: kauditd_printk_skb: 377 callbacks suppressed Oct 2 19:11:37.571289 kernel: audit: type=1325 audit(1696273897.569:1069): table=filter:95 family=2 entries=16 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:37.569000 audit[2372]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffcca5f7d20 a2=0 a3=7ffcca5f7d0c items=0 ppid=2181 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.575665 kernel: audit: type=1300 audit(1696273897.569:1069): arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffcca5f7d20 a2=0 a3=7ffcca5f7d0c items=0 ppid=2181 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.575729 kernel: audit: type=1327 audit(1696273897.569:1069): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:37.569000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:37.569000 audit[2372]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:37.569000 audit[2372]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffcca5f7d20 a2=0 a3=31030 items=0 ppid=2181 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.583540 kernel: audit: type=1325 audit(1696273897.569:1070): table=nat:96 family=2 entries=12 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:37.583613 kernel: audit: type=1300 audit(1696273897.569:1070): arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffcca5f7d20 a2=0 a3=31030 items=0 ppid=2181 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.583644 kernel: audit: type=1327 audit(1696273897.569:1070): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:37.569000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:37.742135 env[1105]: time="2023-10-02T19:11:37.742061848Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:11:37.742135 env[1105]: time="2023-10-02T19:11:37.742126790Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:11:37.742306 env[1105]: time="2023-10-02T19:11:37.742145866Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:11:37.742431 env[1105]: time="2023-10-02T19:11:37.742403312Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5f0ff134415d5d3d809632c40bdd4022eb114a600ccfe5c898466df9604c6676 pid=2381 runtime=io.containerd.runc.v2 Oct 2 19:11:37.754446 systemd[1]: Started cri-containerd-5f0ff134415d5d3d809632c40bdd4022eb114a600ccfe5c898466df9604c6676.scope. Oct 2 19:11:37.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.771900 kernel: audit: type=1400 audit(1696273897.763:1071): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.771974 kernel: audit: type=1400 audit(1696273897.763:1072): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.772002 kernel: audit: type=1400 audit(1696273897.763:1073): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.772022 kernel: audit: type=1400 audit(1696273897.763:1074): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.767000 audit: BPF prog-id=127 op=LOAD Oct 2 19:11:37.768000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.768000 audit[2391]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2381 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566306666313334343135643564336438303936333263343062646434 Oct 2 19:11:37.768000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.768000 audit[2391]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2381 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566306666313334343135643564336438303936333263343062646434 Oct 2 19:11:37.768000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.768000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.768000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.768000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.768000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.768000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.768000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.768000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.768000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.768000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.768000 audit: BPF prog-id=128 op=LOAD Oct 2 19:11:37.768000 audit[2391]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a8510 items=0 ppid=2381 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566306666313334343135643564336438303936333263343062646434 Oct 2 19:11:37.769000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.769000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.769000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.769000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.769000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.769000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.769000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.769000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.769000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.769000 audit: BPF prog-id=129 op=LOAD Oct 2 19:11:37.769000 audit[2391]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000a8558 items=0 ppid=2381 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566306666313334343135643564336438303936333263343062646434 Oct 2 19:11:37.771000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:11:37.771000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:11:37.771000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.771000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.771000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.771000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.771000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.771000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.771000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.771000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.771000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.771000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.771000 audit: BPF prog-id=130 op=LOAD Oct 2 19:11:37.771000 audit[2391]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0000a8968 items=0 ppid=2381 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566306666313334343135643564336438303936333263343062646434 Oct 2 19:11:37.787751 env[1105]: time="2023-10-02T19:11:37.787532052Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:11:37.787751 env[1105]: time="2023-10-02T19:11:37.787576917Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:11:37.787751 env[1105]: time="2023-10-02T19:11:37.787586495Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:11:37.787986 env[1105]: time="2023-10-02T19:11:37.787731307Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f58287b84c02d311563318ba6d075388b3553de63406b98e5bd2b9dd86b07256 pid=2414 runtime=io.containerd.runc.v2 Oct 2 19:11:37.802848 env[1105]: time="2023-10-02T19:11:37.802800658Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-96fd9cb4d-wlt5l,Uid:711f1441-4a9d-459c-8ffe-64b847340a34,Namespace:calico-system,Attempt:0,} returns sandbox id \"5f0ff134415d5d3d809632c40bdd4022eb114a600ccfe5c898466df9604c6676\"" Oct 2 19:11:37.804328 systemd[1]: Started cri-containerd-f58287b84c02d311563318ba6d075388b3553de63406b98e5bd2b9dd86b07256.scope. Oct 2 19:11:37.805806 kubelet[1982]: E1002 19:11:37.805777 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:37.806852 env[1105]: time="2023-10-02T19:11:37.806807930Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\"" Oct 2 19:11:37.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.812000 audit: BPF prog-id=131 op=LOAD Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000195c48 a2=10 a3=1c items=0 ppid=2414 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635383238376238346330326433313135363333313862613664303735 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001956b0 a2=3c a3=c items=0 ppid=2414 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635383238376238346330326433313135363333313862613664303735 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit: BPF prog-id=132 op=LOAD Oct 2 19:11:37.813000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001959d8 a2=78 a3=c000092c60 items=0 ppid=2414 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635383238376238346330326433313135363333313862613664303735 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit: BPF prog-id=133 op=LOAD Oct 2 19:11:37.813000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000195770 a2=78 a3=c000092ca8 items=0 ppid=2414 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635383238376238346330326433313135363333313862613664303735 Oct 2 19:11:37.813000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:11:37.813000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:37.813000 audit: BPF prog-id=134 op=LOAD Oct 2 19:11:37.813000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000195c30 a2=78 a3=c0000930b8 items=0 ppid=2414 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:37.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635383238376238346330326433313135363333313862613664303735 Oct 2 19:11:37.822748 env[1105]: time="2023-10-02T19:11:37.822639258Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-85xhn,Uid:36abc540-f458-4638-ba4c-595593660e40,Namespace:calico-system,Attempt:0,} returns sandbox id \"f58287b84c02d311563318ba6d075388b3553de63406b98e5bd2b9dd86b07256\"" Oct 2 19:11:37.823213 kubelet[1982]: E1002 19:11:37.823195 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:39.341916 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1244480702.mount: Deactivated successfully. Oct 2 19:11:40.816733 env[1105]: time="2023-10-02T19:11:40.816683186Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:40.818629 env[1105]: time="2023-10-02T19:11:40.818608746Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:40.822295 env[1105]: time="2023-10-02T19:11:40.822259618Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:40.823973 env[1105]: time="2023-10-02T19:11:40.823943062Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:7fb0e011ffae9f88333b7a7488dae37f1d534b46d2b11a0fe2b5d129df58789c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:40.824638 env[1105]: time="2023-10-02T19:11:40.824599860Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\" returns image reference \"sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f\"" Oct 2 19:11:40.825459 env[1105]: time="2023-10-02T19:11:40.825415308Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 19:11:40.826501 env[1105]: time="2023-10-02T19:11:40.826464205Z" level=info msg="CreateContainer within sandbox \"5f0ff134415d5d3d809632c40bdd4022eb114a600ccfe5c898466df9604c6676\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 2 19:11:40.839522 env[1105]: time="2023-10-02T19:11:40.839467429Z" level=info msg="CreateContainer within sandbox \"5f0ff134415d5d3d809632c40bdd4022eb114a600ccfe5c898466df9604c6676\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"1fb70420f2011957cda0e1ddabf44b8cd7db60cec4245b232105727f16c663e4\"" Oct 2 19:11:40.840082 env[1105]: time="2023-10-02T19:11:40.840039167Z" level=info msg="StartContainer for \"1fb70420f2011957cda0e1ddabf44b8cd7db60cec4245b232105727f16c663e4\"" Oct 2 19:11:40.856158 systemd[1]: Started cri-containerd-1fb70420f2011957cda0e1ddabf44b8cd7db60cec4245b232105727f16c663e4.scope. Oct 2 19:11:40.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit: BPF prog-id=135 op=LOAD Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2381 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:40.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166623730343230663230313139353763646130653164646162663434 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2381 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:40.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166623730343230663230313139353763646130653164646162663434 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit: BPF prog-id=136 op=LOAD Oct 2 19:11:40.865000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000217f10 items=0 ppid=2381 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:40.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166623730343230663230313139353763646130653164646162663434 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit: BPF prog-id=137 op=LOAD Oct 2 19:11:40.865000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000217f58 items=0 ppid=2381 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:40.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166623730343230663230313139353763646130653164646162663434 Oct 2 19:11:40.865000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:11:40.865000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:40.865000 audit: BPF prog-id=138 op=LOAD Oct 2 19:11:40.865000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00038c368 items=0 ppid=2381 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:40.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166623730343230663230313139353763646130653164646162663434 Oct 2 19:11:40.878660 env[1105]: time="2023-10-02T19:11:40.878610362Z" level=info msg="StartContainer for \"1fb70420f2011957cda0e1ddabf44b8cd7db60cec4245b232105727f16c663e4\" returns successfully" Oct 2 19:11:41.212546 kubelet[1982]: E1002 19:11:41.212514 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:41.216015 kubelet[1982]: E1002 19:11:41.215975 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.216072 kubelet[1982]: W1002 19:11:41.216013 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.216072 kubelet[1982]: E1002 19:11:41.216060 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.216450 kubelet[1982]: E1002 19:11:41.216420 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.216450 kubelet[1982]: W1002 19:11:41.216444 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.216537 kubelet[1982]: E1002 19:11:41.216466 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.216670 kubelet[1982]: E1002 19:11:41.216650 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.216670 kubelet[1982]: W1002 19:11:41.216663 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.216670 kubelet[1982]: E1002 19:11:41.216671 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.216940 kubelet[1982]: E1002 19:11:41.216918 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.216940 kubelet[1982]: W1002 19:11:41.216934 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.216940 kubelet[1982]: E1002 19:11:41.216944 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.217105 kubelet[1982]: E1002 19:11:41.217068 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.217105 kubelet[1982]: W1002 19:11:41.217079 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.217105 kubelet[1982]: E1002 19:11:41.217087 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.217383 kubelet[1982]: E1002 19:11:41.217229 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.217383 kubelet[1982]: W1002 19:11:41.217237 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.217383 kubelet[1982]: E1002 19:11:41.217247 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.217514 kubelet[1982]: E1002 19:11:41.217398 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.217514 kubelet[1982]: W1002 19:11:41.217406 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.217514 kubelet[1982]: E1002 19:11:41.217415 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.217620 kubelet[1982]: E1002 19:11:41.217536 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.217620 kubelet[1982]: W1002 19:11:41.217542 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.217620 kubelet[1982]: E1002 19:11:41.217549 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.217732 kubelet[1982]: E1002 19:11:41.217676 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.217732 kubelet[1982]: W1002 19:11:41.217682 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.217732 kubelet[1982]: E1002 19:11:41.217690 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.217841 kubelet[1982]: E1002 19:11:41.217816 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.217841 kubelet[1982]: W1002 19:11:41.217825 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.217841 kubelet[1982]: E1002 19:11:41.217837 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.218041 kubelet[1982]: E1002 19:11:41.218022 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.218041 kubelet[1982]: W1002 19:11:41.218036 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.218162 kubelet[1982]: E1002 19:11:41.218048 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.218411 kubelet[1982]: E1002 19:11:41.218390 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.218411 kubelet[1982]: W1002 19:11:41.218405 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.218539 kubelet[1982]: E1002 19:11:41.218426 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.218623 kubelet[1982]: E1002 19:11:41.218590 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.218623 kubelet[1982]: W1002 19:11:41.218608 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.218623 kubelet[1982]: E1002 19:11:41.218617 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.218778 kubelet[1982]: E1002 19:11:41.218762 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.218778 kubelet[1982]: W1002 19:11:41.218770 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.218778 kubelet[1982]: E1002 19:11:41.218780 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.219972 kubelet[1982]: E1002 19:11:41.219951 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.219972 kubelet[1982]: W1002 19:11:41.219973 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.220077 kubelet[1982]: E1002 19:11:41.219985 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.220764 kubelet[1982]: E1002 19:11:41.220303 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.220764 kubelet[1982]: W1002 19:11:41.220319 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.220764 kubelet[1982]: E1002 19:11:41.220334 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.220764 kubelet[1982]: E1002 19:11:41.220645 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.220764 kubelet[1982]: W1002 19:11:41.220652 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.220764 kubelet[1982]: E1002 19:11:41.220664 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.221112 kubelet[1982]: E1002 19:11:41.220843 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.221112 kubelet[1982]: W1002 19:11:41.220850 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.221112 kubelet[1982]: E1002 19:11:41.220862 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.221112 kubelet[1982]: E1002 19:11:41.221060 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.221112 kubelet[1982]: W1002 19:11:41.221067 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.221112 kubelet[1982]: E1002 19:11:41.221078 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.221315 kubelet[1982]: E1002 19:11:41.221197 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.221315 kubelet[1982]: W1002 19:11:41.221203 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.221315 kubelet[1982]: E1002 19:11:41.221212 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.221315 kubelet[1982]: E1002 19:11:41.221313 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.221315 kubelet[1982]: W1002 19:11:41.221319 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.221491 kubelet[1982]: E1002 19:11:41.221330 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.221491 kubelet[1982]: E1002 19:11:41.221452 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.221491 kubelet[1982]: W1002 19:11:41.221457 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.221491 kubelet[1982]: E1002 19:11:41.221467 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.222534 kubelet[1982]: E1002 19:11:41.221810 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.222534 kubelet[1982]: W1002 19:11:41.221819 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.222534 kubelet[1982]: E1002 19:11:41.221880 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.222534 kubelet[1982]: E1002 19:11:41.221999 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.222534 kubelet[1982]: W1002 19:11:41.222007 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.222534 kubelet[1982]: E1002 19:11:41.222033 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.222534 kubelet[1982]: E1002 19:11:41.222159 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.222534 kubelet[1982]: W1002 19:11:41.222166 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.222854 kubelet[1982]: I1002 19:11:41.222167 1982 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-96fd9cb4d-wlt5l" podStartSLOduration=2.203655248 podCreationTimestamp="2023-10-02 19:11:36 +0000 UTC" firstStartedPulling="2023-10-02 19:11:37.806429487 +0000 UTC m=+21.729645904" lastFinishedPulling="2023-10-02 19:11:40.824888454 +0000 UTC m=+24.748104881" observedRunningTime="2023-10-02 19:11:41.220575214 +0000 UTC m=+25.143791641" watchObservedRunningTime="2023-10-02 19:11:41.222114225 +0000 UTC m=+25.145330652" Oct 2 19:11:41.222854 kubelet[1982]: E1002 19:11:41.222177 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.222854 kubelet[1982]: E1002 19:11:41.222339 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.222854 kubelet[1982]: W1002 19:11:41.222346 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.222854 kubelet[1982]: E1002 19:11:41.222357 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.222854 kubelet[1982]: E1002 19:11:41.222506 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.222854 kubelet[1982]: W1002 19:11:41.222523 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.222854 kubelet[1982]: E1002 19:11:41.222533 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.222854 kubelet[1982]: E1002 19:11:41.222695 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.223238 kubelet[1982]: W1002 19:11:41.222703 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.223238 kubelet[1982]: E1002 19:11:41.222718 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.223238 kubelet[1982]: E1002 19:11:41.222995 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.223238 kubelet[1982]: W1002 19:11:41.223008 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.223238 kubelet[1982]: E1002 19:11:41.223026 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.223238 kubelet[1982]: E1002 19:11:41.223168 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.223238 kubelet[1982]: W1002 19:11:41.223173 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.223238 kubelet[1982]: E1002 19:11:41.223187 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.223506 kubelet[1982]: E1002 19:11:41.223356 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.223506 kubelet[1982]: W1002 19:11:41.223366 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.223506 kubelet[1982]: E1002 19:11:41.223384 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.223820 kubelet[1982]: E1002 19:11:41.223546 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.223820 kubelet[1982]: W1002 19:11:41.223552 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.223820 kubelet[1982]: E1002 19:11:41.223560 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.223978 kubelet[1982]: E1002 19:11:41.223860 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:41.223978 kubelet[1982]: W1002 19:11:41.223866 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:41.223978 kubelet[1982]: E1002 19:11:41.223908 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:41.242000 audit[2528]: NETFILTER_CFG table=filter:97 family=2 entries=15 op=nft_register_rule pid=2528 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:41.242000 audit[2528]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffd830a77f0 a2=0 a3=7ffd830a77dc items=0 ppid=2181 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:41.242000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:41.243000 audit[2528]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_register_chain pid=2528 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:11:41.243000 audit[2528]: SYSCALL arch=c000003e syscall=46 success=yes exit=6068 a0=3 a1=7ffd830a77f0 a2=0 a3=7ffd830a77dc items=0 ppid=2181 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:41.243000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:11:42.214160 kubelet[1982]: E1002 19:11:42.214120 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:42.226924 kubelet[1982]: E1002 19:11:42.226891 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.226924 kubelet[1982]: W1002 19:11:42.226907 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.227111 kubelet[1982]: E1002 19:11:42.226930 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.227111 kubelet[1982]: E1002 19:11:42.227089 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.227111 kubelet[1982]: W1002 19:11:42.227098 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.227111 kubelet[1982]: E1002 19:11:42.227112 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.227278 kubelet[1982]: E1002 19:11:42.227259 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.227278 kubelet[1982]: W1002 19:11:42.227268 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.227354 kubelet[1982]: E1002 19:11:42.227279 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.227443 kubelet[1982]: E1002 19:11:42.227429 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.227443 kubelet[1982]: W1002 19:11:42.227440 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.227663 kubelet[1982]: E1002 19:11:42.227576 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.227763 kubelet[1982]: E1002 19:11:42.227741 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.227763 kubelet[1982]: W1002 19:11:42.227757 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.227821 kubelet[1982]: E1002 19:11:42.227772 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.228031 kubelet[1982]: E1002 19:11:42.228020 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.228031 kubelet[1982]: W1002 19:11:42.228029 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.228104 kubelet[1982]: E1002 19:11:42.228042 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.228207 kubelet[1982]: E1002 19:11:42.228198 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.228240 kubelet[1982]: W1002 19:11:42.228211 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.228240 kubelet[1982]: E1002 19:11:42.228223 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.228390 kubelet[1982]: E1002 19:11:42.228378 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.228431 kubelet[1982]: W1002 19:11:42.228388 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.228431 kubelet[1982]: E1002 19:11:42.228405 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.228565 kubelet[1982]: E1002 19:11:42.228554 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.228565 kubelet[1982]: W1002 19:11:42.228563 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.228631 kubelet[1982]: E1002 19:11:42.228574 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.228731 kubelet[1982]: E1002 19:11:42.228722 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.228731 kubelet[1982]: W1002 19:11:42.228730 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.228812 kubelet[1982]: E1002 19:11:42.228741 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.228911 kubelet[1982]: E1002 19:11:42.228900 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.228911 kubelet[1982]: W1002 19:11:42.228911 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.228971 kubelet[1982]: E1002 19:11:42.228922 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.229101 kubelet[1982]: E1002 19:11:42.229086 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.229101 kubelet[1982]: W1002 19:11:42.229096 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.229186 kubelet[1982]: E1002 19:11:42.229107 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.229275 kubelet[1982]: E1002 19:11:42.229263 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.229316 kubelet[1982]: W1002 19:11:42.229283 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.229316 kubelet[1982]: E1002 19:11:42.229294 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.229485 kubelet[1982]: E1002 19:11:42.229467 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.229485 kubelet[1982]: W1002 19:11:42.229479 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.229548 kubelet[1982]: E1002 19:11:42.229490 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.229652 kubelet[1982]: E1002 19:11:42.229640 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.229652 kubelet[1982]: W1002 19:11:42.229651 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.229741 kubelet[1982]: E1002 19:11:42.229662 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.229921 kubelet[1982]: E1002 19:11:42.229909 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.229921 kubelet[1982]: W1002 19:11:42.229920 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.229921 kubelet[1982]: E1002 19:11:42.229932 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.230169 kubelet[1982]: E1002 19:11:42.230150 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.230169 kubelet[1982]: W1002 19:11:42.230159 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.230169 kubelet[1982]: E1002 19:11:42.230172 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.230330 kubelet[1982]: E1002 19:11:42.230306 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.230330 kubelet[1982]: W1002 19:11:42.230319 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.230330 kubelet[1982]: E1002 19:11:42.230335 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.230564 kubelet[1982]: E1002 19:11:42.230483 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.230564 kubelet[1982]: W1002 19:11:42.230489 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.230564 kubelet[1982]: E1002 19:11:42.230502 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.230641 kubelet[1982]: E1002 19:11:42.230627 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.230641 kubelet[1982]: W1002 19:11:42.230638 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.230690 kubelet[1982]: E1002 19:11:42.230654 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.230794 kubelet[1982]: E1002 19:11:42.230778 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.230794 kubelet[1982]: W1002 19:11:42.230790 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.230861 kubelet[1982]: E1002 19:11:42.230806 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.231019 kubelet[1982]: E1002 19:11:42.231004 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.231019 kubelet[1982]: W1002 19:11:42.231017 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.231065 kubelet[1982]: E1002 19:11:42.231034 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.231230 kubelet[1982]: E1002 19:11:42.231215 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.231230 kubelet[1982]: W1002 19:11:42.231225 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.231293 kubelet[1982]: E1002 19:11:42.231240 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.231391 kubelet[1982]: E1002 19:11:42.231377 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.231391 kubelet[1982]: W1002 19:11:42.231388 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.231438 kubelet[1982]: E1002 19:11:42.231417 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.231517 kubelet[1982]: E1002 19:11:42.231506 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.231517 kubelet[1982]: W1002 19:11:42.231514 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.231563 kubelet[1982]: E1002 19:11:42.231533 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.231630 kubelet[1982]: E1002 19:11:42.231620 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.231630 kubelet[1982]: W1002 19:11:42.231628 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.231679 kubelet[1982]: E1002 19:11:42.231639 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.231757 kubelet[1982]: E1002 19:11:42.231747 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.231757 kubelet[1982]: W1002 19:11:42.231755 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.231823 kubelet[1982]: E1002 19:11:42.231768 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.231947 kubelet[1982]: E1002 19:11:42.231932 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.231947 kubelet[1982]: W1002 19:11:42.231940 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.231947 kubelet[1982]: E1002 19:11:42.231951 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.232175 kubelet[1982]: E1002 19:11:42.232160 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.232175 kubelet[1982]: W1002 19:11:42.232173 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.232233 kubelet[1982]: E1002 19:11:42.232190 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.232356 kubelet[1982]: E1002 19:11:42.232339 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.232356 kubelet[1982]: W1002 19:11:42.232353 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.232426 kubelet[1982]: E1002 19:11:42.232371 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.232537 kubelet[1982]: E1002 19:11:42.232523 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.232537 kubelet[1982]: W1002 19:11:42.232534 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.232582 kubelet[1982]: E1002 19:11:42.232550 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.232789 kubelet[1982]: E1002 19:11:42.232771 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.232789 kubelet[1982]: W1002 19:11:42.232784 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.232853 kubelet[1982]: E1002 19:11:42.232807 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:42.233011 kubelet[1982]: E1002 19:11:42.232994 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:42.233011 kubelet[1982]: W1002 19:11:42.233006 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:42.233083 kubelet[1982]: E1002 19:11:42.233019 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.215598 kubelet[1982]: E1002 19:11:43.215562 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:43.237051 kubelet[1982]: E1002 19:11:43.237010 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.237051 kubelet[1982]: W1002 19:11:43.237038 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.237295 kubelet[1982]: E1002 19:11:43.237068 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.237295 kubelet[1982]: E1002 19:11:43.237244 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.237295 kubelet[1982]: W1002 19:11:43.237253 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.237295 kubelet[1982]: E1002 19:11:43.237266 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.237443 kubelet[1982]: E1002 19:11:43.237430 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.237470 kubelet[1982]: W1002 19:11:43.237441 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.237470 kubelet[1982]: E1002 19:11:43.237459 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.237651 kubelet[1982]: E1002 19:11:43.237637 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.237651 kubelet[1982]: W1002 19:11:43.237646 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.237742 kubelet[1982]: E1002 19:11:43.237660 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.237825 kubelet[1982]: E1002 19:11:43.237795 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.237825 kubelet[1982]: W1002 19:11:43.237801 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.237825 kubelet[1982]: E1002 19:11:43.237810 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.237963 kubelet[1982]: E1002 19:11:43.237950 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.237963 kubelet[1982]: W1002 19:11:43.237958 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.237963 kubelet[1982]: E1002 19:11:43.237966 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.238140 kubelet[1982]: E1002 19:11:43.238106 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.238140 kubelet[1982]: W1002 19:11:43.238119 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.238140 kubelet[1982]: E1002 19:11:43.238134 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.238381 kubelet[1982]: E1002 19:11:43.238301 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.238381 kubelet[1982]: W1002 19:11:43.238307 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.238381 kubelet[1982]: E1002 19:11:43.238316 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.238555 kubelet[1982]: E1002 19:11:43.238535 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.238555 kubelet[1982]: W1002 19:11:43.238544 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.238555 kubelet[1982]: E1002 19:11:43.238553 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.238737 kubelet[1982]: E1002 19:11:43.238724 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.238737 kubelet[1982]: W1002 19:11:43.238733 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.238806 kubelet[1982]: E1002 19:11:43.238743 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.238938 kubelet[1982]: E1002 19:11:43.238920 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.238938 kubelet[1982]: W1002 19:11:43.238932 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.238938 kubelet[1982]: E1002 19:11:43.238943 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.239139 kubelet[1982]: E1002 19:11:43.239124 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.239139 kubelet[1982]: W1002 19:11:43.239135 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.239207 kubelet[1982]: E1002 19:11:43.239144 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.239333 kubelet[1982]: E1002 19:11:43.239321 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.239333 kubelet[1982]: W1002 19:11:43.239331 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.239383 kubelet[1982]: E1002 19:11:43.239341 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.239489 kubelet[1982]: E1002 19:11:43.239479 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.239489 kubelet[1982]: W1002 19:11:43.239487 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.239534 kubelet[1982]: E1002 19:11:43.239495 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.239632 kubelet[1982]: E1002 19:11:43.239619 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.239658 kubelet[1982]: W1002 19:11:43.239635 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.239658 kubelet[1982]: E1002 19:11:43.239644 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.337835 kubelet[1982]: E1002 19:11:43.337796 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.337835 kubelet[1982]: W1002 19:11:43.337822 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.338044 kubelet[1982]: E1002 19:11:43.337850 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.338177 kubelet[1982]: E1002 19:11:43.338151 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.338206 kubelet[1982]: W1002 19:11:43.338174 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.338235 kubelet[1982]: E1002 19:11:43.338207 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.338467 kubelet[1982]: E1002 19:11:43.338455 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.338467 kubelet[1982]: W1002 19:11:43.338463 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.338564 kubelet[1982]: E1002 19:11:43.338480 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.338703 kubelet[1982]: E1002 19:11:43.338685 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.338703 kubelet[1982]: W1002 19:11:43.338693 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.338773 kubelet[1982]: E1002 19:11:43.338706 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.338847 kubelet[1982]: E1002 19:11:43.338840 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.338891 kubelet[1982]: W1002 19:11:43.338847 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.338891 kubelet[1982]: E1002 19:11:43.338859 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.339038 kubelet[1982]: E1002 19:11:43.339024 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.339038 kubelet[1982]: W1002 19:11:43.339033 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.339086 kubelet[1982]: E1002 19:11:43.339046 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.339266 kubelet[1982]: E1002 19:11:43.339248 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.339266 kubelet[1982]: W1002 19:11:43.339263 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.339337 kubelet[1982]: E1002 19:11:43.339297 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.339463 kubelet[1982]: E1002 19:11:43.339443 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.339463 kubelet[1982]: W1002 19:11:43.339460 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.339522 kubelet[1982]: E1002 19:11:43.339496 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.339643 kubelet[1982]: E1002 19:11:43.339630 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.339666 kubelet[1982]: W1002 19:11:43.339641 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.339666 kubelet[1982]: E1002 19:11:43.339663 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.339859 kubelet[1982]: E1002 19:11:43.339845 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.339859 kubelet[1982]: W1002 19:11:43.339857 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.339951 kubelet[1982]: E1002 19:11:43.339895 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.340081 kubelet[1982]: E1002 19:11:43.340066 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.340081 kubelet[1982]: W1002 19:11:43.340079 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.340127 kubelet[1982]: E1002 19:11:43.340098 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.340306 kubelet[1982]: E1002 19:11:43.340290 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.340306 kubelet[1982]: W1002 19:11:43.340301 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.340376 kubelet[1982]: E1002 19:11:43.340318 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.340526 kubelet[1982]: E1002 19:11:43.340515 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.340526 kubelet[1982]: W1002 19:11:43.340526 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.340596 kubelet[1982]: E1002 19:11:43.340543 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.340700 kubelet[1982]: E1002 19:11:43.340690 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.340700 kubelet[1982]: W1002 19:11:43.340698 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.340748 kubelet[1982]: E1002 19:11:43.340730 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.340888 kubelet[1982]: E1002 19:11:43.340860 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.340888 kubelet[1982]: W1002 19:11:43.340881 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.340955 kubelet[1982]: E1002 19:11:43.340900 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.341037 kubelet[1982]: E1002 19:11:43.341027 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.341037 kubelet[1982]: W1002 19:11:43.341034 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.341086 kubelet[1982]: E1002 19:11:43.341048 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.341258 kubelet[1982]: E1002 19:11:43.341242 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.341288 kubelet[1982]: W1002 19:11:43.341257 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.341288 kubelet[1982]: E1002 19:11:43.341275 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.341577 kubelet[1982]: E1002 19:11:43.341559 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:11:43.341577 kubelet[1982]: W1002 19:11:43.341573 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:11:43.341680 kubelet[1982]: E1002 19:11:43.341587 1982 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:11:43.651078 env[1105]: time="2023-10-02T19:11:43.650950744Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:43.654030 env[1105]: time="2023-10-02T19:11:43.653993415Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:43.661581 env[1105]: time="2023-10-02T19:11:43.657820213Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:43.661581 env[1105]: time="2023-10-02T19:11:43.661145347Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:43.663956 env[1105]: time="2023-10-02T19:11:43.663913981Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72\"" Oct 2 19:11:43.670452 env[1105]: time="2023-10-02T19:11:43.668098233Z" level=info msg="CreateContainer within sandbox \"f58287b84c02d311563318ba6d075388b3553de63406b98e5bd2b9dd86b07256\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 19:11:43.684244 env[1105]: time="2023-10-02T19:11:43.684194782Z" level=info msg="CreateContainer within sandbox \"f58287b84c02d311563318ba6d075388b3553de63406b98e5bd2b9dd86b07256\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"f00b5e2d78e713b85ccf1d06a4350dcf87fea17b61ce104a614dbcdac69e628a\"" Oct 2 19:11:43.684808 env[1105]: time="2023-10-02T19:11:43.684760437Z" level=info msg="StartContainer for \"f00b5e2d78e713b85ccf1d06a4350dcf87fea17b61ce104a614dbcdac69e628a\"" Oct 2 19:11:43.704353 systemd[1]: Started cri-containerd-f00b5e2d78e713b85ccf1d06a4350dcf87fea17b61ce104a614dbcdac69e628a.scope. Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.718759 kernel: kauditd_printk_skb: 173 callbacks suppressed Oct 2 19:11:43.718825 kernel: audit: type=1400 audit(1696273903.715:1127): avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.718848 kernel: audit: type=1300 audit(1696273903.715:1127): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2414 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:43.715000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2414 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:43.721640 kernel: audit: type=1327 audit(1696273903.715:1127): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630306235653264373865373133623835636366316430366134333530 Oct 2 19:11:43.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630306235653264373865373133623835636366316430366134333530 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.726227 kernel: audit: type=1400 audit(1696273903.715:1128): avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.726271 kernel: audit: type=1400 audit(1696273903.715:1128): avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.730015 kernel: audit: type=1400 audit(1696273903.715:1128): avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.730048 kernel: audit: type=1400 audit(1696273903.715:1128): avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.733979 kernel: audit: type=1400 audit(1696273903.715:1128): avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.736445 kernel: audit: type=1400 audit(1696273903.715:1128): avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.736518 env[1105]: time="2023-10-02T19:11:43.736297210Z" level=info msg="StartContainer for \"f00b5e2d78e713b85ccf1d06a4350dcf87fea17b61ce104a614dbcdac69e628a\" returns successfully" Oct 2 19:11:43.738580 kernel: audit: type=1400 audit(1696273903.715:1128): avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit: BPF prog-id=139 op=LOAD Oct 2 19:11:43.715000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00027e140 items=0 ppid=2414 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:43.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630306235653264373865373133623835636366316430366134333530 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit: BPF prog-id=140 op=LOAD Oct 2 19:11:43.715000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00027e188 items=0 ppid=2414 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:43.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630306235653264373865373133623835636366316430366134333530 Oct 2 19:11:43.715000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:11:43.715000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:43.715000 audit: BPF prog-id=141 op=LOAD Oct 2 19:11:43.715000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00027e218 items=0 ppid=2414 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:43.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630306235653264373865373133623835636366316430366134333530 Oct 2 19:11:43.743967 systemd[1]: cri-containerd-f00b5e2d78e713b85ccf1d06a4350dcf87fea17b61ce104a614dbcdac69e628a.scope: Deactivated successfully. Oct 2 19:11:43.748000 audit: BPF prog-id=141 op=UNLOAD Oct 2 19:11:43.893936 env[1105]: time="2023-10-02T19:11:43.893889243Z" level=info msg="shim disconnected" id=f00b5e2d78e713b85ccf1d06a4350dcf87fea17b61ce104a614dbcdac69e628a Oct 2 19:11:43.893936 env[1105]: time="2023-10-02T19:11:43.893933576Z" level=warning msg="cleaning up after shim disconnected" id=f00b5e2d78e713b85ccf1d06a4350dcf87fea17b61ce104a614dbcdac69e628a namespace=k8s.io Oct 2 19:11:43.893936 env[1105]: time="2023-10-02T19:11:43.893942292Z" level=info msg="cleaning up dead shim" Oct 2 19:11:43.900520 env[1105]: time="2023-10-02T19:11:43.900469517Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:11:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2641 runtime=io.containerd.runc.v2\n" Oct 2 19:11:44.108258 systemd[1]: Started sshd@7-10.0.0.69:22-10.0.0.1:32780.service. Oct 2 19:11:44.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.69:22-10.0.0.1:32780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:44.142000 audit[2655]: USER_ACCT pid=2655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:44.143000 audit[2655]: CRED_ACQ pid=2655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:44.143000 audit[2655]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff84ecabf0 a2=3 a3=0 items=0 ppid=1 pid=2655 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:44.143000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:44.145305 sshd[2655]: Accepted publickey for core from 10.0.0.1 port 32780 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:11:44.144991 sshd[2655]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:44.151096 systemd[1]: Started session-8.scope. Oct 2 19:11:44.151817 systemd-logind[1090]: New session 8 of user core. Oct 2 19:11:44.156000 audit[2655]: USER_START pid=2655 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:44.157000 audit[2657]: CRED_ACQ pid=2657 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:44.224173 kubelet[1982]: E1002 19:11:44.224131 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:44.224950 env[1105]: time="2023-10-02T19:11:44.224907995Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 19:11:44.274589 sshd[2655]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:44.274000 audit[2655]: USER_END pid=2655 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:44.274000 audit[2655]: CRED_DISP pid=2655 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:44.277136 systemd[1]: sshd@7-10.0.0.69:22-10.0.0.1:32780.service: Deactivated successfully. Oct 2 19:11:44.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.69:22-10.0.0.1:32780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:44.277973 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:11:44.278555 systemd-logind[1090]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:11:44.279336 systemd-logind[1090]: Removed session 8. Oct 2 19:11:44.679383 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f00b5e2d78e713b85ccf1d06a4350dcf87fea17b61ce104a614dbcdac69e628a-rootfs.mount: Deactivated successfully. Oct 2 19:11:45.698144 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1876288834.mount: Deactivated successfully. Oct 2 19:11:48.613495 env[1105]: time="2023-10-02T19:11:48.613046926Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:48.615130 env[1105]: time="2023-10-02T19:11:48.615097544Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:48.617217 env[1105]: time="2023-10-02T19:11:48.617185913Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:48.619336 env[1105]: time="2023-10-02T19:11:48.619271858Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:48.619973 env[1105]: time="2023-10-02T19:11:48.619932030Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7\"" Oct 2 19:11:48.622239 env[1105]: time="2023-10-02T19:11:48.622203213Z" level=info msg="CreateContainer within sandbox \"f58287b84c02d311563318ba6d075388b3553de63406b98e5bd2b9dd86b07256\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 19:11:48.635342 env[1105]: time="2023-10-02T19:11:48.635291126Z" level=info msg="CreateContainer within sandbox \"f58287b84c02d311563318ba6d075388b3553de63406b98e5bd2b9dd86b07256\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"ae52ef3c733eb29baa4e241a58cdc14988257ddf8ac2c9bc0dab46fa9e41ef27\"" Oct 2 19:11:48.636016 env[1105]: time="2023-10-02T19:11:48.635995782Z" level=info msg="StartContainer for \"ae52ef3c733eb29baa4e241a58cdc14988257ddf8ac2c9bc0dab46fa9e41ef27\"" Oct 2 19:11:48.665172 systemd[1]: Started cri-containerd-ae52ef3c733eb29baa4e241a58cdc14988257ddf8ac2c9bc0dab46fa9e41ef27.scope. Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2414 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:48.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165353265663363373333656232396261613465323431613538636463 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit: BPF prog-id=142 op=LOAD Oct 2 19:11:48.680000 audit[2680]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000284810 items=0 ppid=2414 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:48.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165353265663363373333656232396261613465323431613538636463 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit: BPF prog-id=143 op=LOAD Oct 2 19:11:48.680000 audit[2680]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000284858 items=0 ppid=2414 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:48.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165353265663363373333656232396261613465323431613538636463 Oct 2 19:11:48.680000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:11:48.680000 audit: BPF prog-id=142 op=UNLOAD Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { perfmon } for pid=2680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit[2680]: AVC avc: denied { bpf } for pid=2680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:48.680000 audit: BPF prog-id=144 op=LOAD Oct 2 19:11:48.680000 audit[2680]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002848e8 items=0 ppid=2414 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:48.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165353265663363373333656232396261613465323431613538636463 Oct 2 19:11:48.696569 env[1105]: time="2023-10-02T19:11:48.696510473Z" level=info msg="StartContainer for \"ae52ef3c733eb29baa4e241a58cdc14988257ddf8ac2c9bc0dab46fa9e41ef27\" returns successfully" Oct 2 19:11:49.236678 kubelet[1982]: E1002 19:11:49.236625 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:49.736629 env[1105]: time="2023-10-02T19:11:49.736557059Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:11:49.739420 systemd[1]: cri-containerd-ae52ef3c733eb29baa4e241a58cdc14988257ddf8ac2c9bc0dab46fa9e41ef27.scope: Deactivated successfully. Oct 2 19:11:49.746583 kernel: kauditd_printk_skb: 88 callbacks suppressed Oct 2 19:11:49.746699 kernel: audit: type=1334 audit(1696273909.744:1149): prog-id=144 op=UNLOAD Oct 2 19:11:49.744000 audit: BPF prog-id=144 op=UNLOAD Oct 2 19:11:49.758053 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ae52ef3c733eb29baa4e241a58cdc14988257ddf8ac2c9bc0dab46fa9e41ef27-rootfs.mount: Deactivated successfully. Oct 2 19:11:49.763072 env[1105]: time="2023-10-02T19:11:49.763020107Z" level=info msg="shim disconnected" id=ae52ef3c733eb29baa4e241a58cdc14988257ddf8ac2c9bc0dab46fa9e41ef27 Oct 2 19:11:49.763167 env[1105]: time="2023-10-02T19:11:49.763075561Z" level=warning msg="cleaning up after shim disconnected" id=ae52ef3c733eb29baa4e241a58cdc14988257ddf8ac2c9bc0dab46fa9e41ef27 namespace=k8s.io Oct 2 19:11:49.763167 env[1105]: time="2023-10-02T19:11:49.763093514Z" level=info msg="cleaning up dead shim" Oct 2 19:11:49.770285 env[1105]: time="2023-10-02T19:11:49.770236100Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:11:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2729 runtime=io.containerd.runc.v2\n" Oct 2 19:11:49.828903 kubelet[1982]: I1002 19:11:49.828839 1982 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Oct 2 19:11:49.844169 kubelet[1982]: I1002 19:11:49.844115 1982 topology_manager.go:215] "Topology Admit Handler" podUID="19055d5c-0e0a-48aa-b10b-d45f21731b0f" podNamespace="kube-system" podName="coredns-5dd5756b68-gptkl" Oct 2 19:11:49.848160 kubelet[1982]: I1002 19:11:49.847606 1982 topology_manager.go:215] "Topology Admit Handler" podUID="a98068cd-fff0-4619-893b-592048280adf" podNamespace="kube-system" podName="coredns-5dd5756b68-zpf5d" Oct 2 19:11:49.848160 kubelet[1982]: I1002 19:11:49.847816 1982 topology_manager.go:215] "Topology Admit Handler" podUID="ed9546b3-459e-4894-8abb-08ca86f0fc00" podNamespace="calico-system" podName="calico-kube-controllers-74b9887bb6-nj7g2" Oct 2 19:11:49.850674 kubelet[1982]: I1002 19:11:49.850624 1982 topology_manager.go:215] "Topology Admit Handler" podUID="2abd516e-6d98-4ceb-865f-dc4a20fb9578" podNamespace="calico-system" podName="csi-node-driver-n92cw" Oct 2 19:11:49.854520 systemd[1]: Created slice kubepods-burstable-pod19055d5c_0e0a_48aa_b10b_d45f21731b0f.slice. Oct 2 19:11:49.860248 systemd[1]: Created slice kubepods-besteffort-poded9546b3_459e_4894_8abb_08ca86f0fc00.slice. Oct 2 19:11:49.868085 systemd[1]: Created slice kubepods-burstable-poda98068cd_fff0_4619_893b_592048280adf.slice. Oct 2 19:11:49.872573 systemd[1]: Created slice kubepods-besteffort-pod2abd516e_6d98_4ceb_865f_dc4a20fb9578.slice. Oct 2 19:11:49.986616 kubelet[1982]: I1002 19:11:49.986559 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lv6zw\" (UniqueName: \"kubernetes.io/projected/2abd516e-6d98-4ceb-865f-dc4a20fb9578-kube-api-access-lv6zw\") pod \"csi-node-driver-n92cw\" (UID: \"2abd516e-6d98-4ceb-865f-dc4a20fb9578\") " pod="calico-system/csi-node-driver-n92cw" Oct 2 19:11:49.986616 kubelet[1982]: I1002 19:11:49.986621 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ptm5h\" (UniqueName: \"kubernetes.io/projected/a98068cd-fff0-4619-893b-592048280adf-kube-api-access-ptm5h\") pod \"coredns-5dd5756b68-zpf5d\" (UID: \"a98068cd-fff0-4619-893b-592048280adf\") " pod="kube-system/coredns-5dd5756b68-zpf5d" Oct 2 19:11:49.986935 kubelet[1982]: I1002 19:11:49.986647 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/2abd516e-6d98-4ceb-865f-dc4a20fb9578-socket-dir\") pod \"csi-node-driver-n92cw\" (UID: \"2abd516e-6d98-4ceb-865f-dc4a20fb9578\") " pod="calico-system/csi-node-driver-n92cw" Oct 2 19:11:49.986935 kubelet[1982]: I1002 19:11:49.986724 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/2abd516e-6d98-4ceb-865f-dc4a20fb9578-etccalico\") pod \"csi-node-driver-n92cw\" (UID: \"2abd516e-6d98-4ceb-865f-dc4a20fb9578\") " pod="calico-system/csi-node-driver-n92cw" Oct 2 19:11:49.986935 kubelet[1982]: I1002 19:11:49.986773 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7wv9v\" (UniqueName: \"kubernetes.io/projected/ed9546b3-459e-4894-8abb-08ca86f0fc00-kube-api-access-7wv9v\") pod \"calico-kube-controllers-74b9887bb6-nj7g2\" (UID: \"ed9546b3-459e-4894-8abb-08ca86f0fc00\") " pod="calico-system/calico-kube-controllers-74b9887bb6-nj7g2" Oct 2 19:11:49.986935 kubelet[1982]: I1002 19:11:49.986858 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8ldtw\" (UniqueName: \"kubernetes.io/projected/19055d5c-0e0a-48aa-b10b-d45f21731b0f-kube-api-access-8ldtw\") pod \"coredns-5dd5756b68-gptkl\" (UID: \"19055d5c-0e0a-48aa-b10b-d45f21731b0f\") " pod="kube-system/coredns-5dd5756b68-gptkl" Oct 2 19:11:49.987102 kubelet[1982]: I1002 19:11:49.986966 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/2abd516e-6d98-4ceb-865f-dc4a20fb9578-kubelet-dir\") pod \"csi-node-driver-n92cw\" (UID: \"2abd516e-6d98-4ceb-865f-dc4a20fb9578\") " pod="calico-system/csi-node-driver-n92cw" Oct 2 19:11:49.987102 kubelet[1982]: I1002 19:11:49.986999 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/19055d5c-0e0a-48aa-b10b-d45f21731b0f-config-volume\") pod \"coredns-5dd5756b68-gptkl\" (UID: \"19055d5c-0e0a-48aa-b10b-d45f21731b0f\") " pod="kube-system/coredns-5dd5756b68-gptkl" Oct 2 19:11:49.987102 kubelet[1982]: I1002 19:11:49.987070 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/2abd516e-6d98-4ceb-865f-dc4a20fb9578-registration-dir\") pod \"csi-node-driver-n92cw\" (UID: \"2abd516e-6d98-4ceb-865f-dc4a20fb9578\") " pod="calico-system/csi-node-driver-n92cw" Oct 2 19:11:49.987102 kubelet[1982]: I1002 19:11:49.987099 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/2abd516e-6d98-4ceb-865f-dc4a20fb9578-varrun\") pod \"csi-node-driver-n92cw\" (UID: \"2abd516e-6d98-4ceb-865f-dc4a20fb9578\") " pod="calico-system/csi-node-driver-n92cw" Oct 2 19:11:49.987229 kubelet[1982]: I1002 19:11:49.987121 1982 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/a98068cd-fff0-4619-893b-592048280adf-config-volume\") pod \"coredns-5dd5756b68-zpf5d\" (UID: \"a98068cd-fff0-4619-893b-592048280adf\") " pod="kube-system/coredns-5dd5756b68-zpf5d" Oct 2 19:11:50.161887 kubelet[1982]: E1002 19:11:50.161845 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:50.162349 env[1105]: time="2023-10-02T19:11:50.162303259Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-gptkl,Uid:19055d5c-0e0a-48aa-b10b-d45f21731b0f,Namespace:kube-system,Attempt:0,}" Oct 2 19:11:50.164500 env[1105]: time="2023-10-02T19:11:50.164455437Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-74b9887bb6-nj7g2,Uid:ed9546b3-459e-4894-8abb-08ca86f0fc00,Namespace:calico-system,Attempt:0,}" Oct 2 19:11:50.170286 kubelet[1982]: E1002 19:11:50.170255 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:50.170921 env[1105]: time="2023-10-02T19:11:50.170864650Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-zpf5d,Uid:a98068cd-fff0-4619-893b-592048280adf,Namespace:kube-system,Attempt:0,}" Oct 2 19:11:50.176078 env[1105]: time="2023-10-02T19:11:50.176039303Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-n92cw,Uid:2abd516e-6d98-4ceb-865f-dc4a20fb9578,Namespace:calico-system,Attempt:0,}" Oct 2 19:11:50.239003 kubelet[1982]: E1002 19:11:50.238922 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:50.239864 env[1105]: time="2023-10-02T19:11:50.239836336Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 19:11:50.262438 env[1105]: time="2023-10-02T19:11:50.262333407Z" level=error msg="Failed to destroy network for sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.262806 env[1105]: time="2023-10-02T19:11:50.262768274Z" level=error msg="encountered an error cleaning up failed sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.262964 env[1105]: time="2023-10-02T19:11:50.262829539Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-gptkl,Uid:19055d5c-0e0a-48aa-b10b-d45f21731b0f,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.263210 kubelet[1982]: E1002 19:11:50.263180 1982 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.263369 kubelet[1982]: E1002 19:11:50.263339 1982 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-gptkl" Oct 2 19:11:50.263421 kubelet[1982]: E1002 19:11:50.263374 1982 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-gptkl" Oct 2 19:11:50.263471 kubelet[1982]: E1002 19:11:50.263447 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-gptkl_kube-system(19055d5c-0e0a-48aa-b10b-d45f21731b0f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-gptkl_kube-system(19055d5c-0e0a-48aa-b10b-d45f21731b0f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-gptkl" podUID="19055d5c-0e0a-48aa-b10b-d45f21731b0f" Oct 2 19:11:50.265323 env[1105]: time="2023-10-02T19:11:50.265283494Z" level=error msg="Failed to destroy network for sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.266453 env[1105]: time="2023-10-02T19:11:50.266415113Z" level=error msg="encountered an error cleaning up failed sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.266516 env[1105]: time="2023-10-02T19:11:50.266479844Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-74b9887bb6-nj7g2,Uid:ed9546b3-459e-4894-8abb-08ca86f0fc00,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.266704 kubelet[1982]: E1002 19:11:50.266681 1982 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.266762 kubelet[1982]: E1002 19:11:50.266728 1982 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-74b9887bb6-nj7g2" Oct 2 19:11:50.266762 kubelet[1982]: E1002 19:11:50.266757 1982 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-74b9887bb6-nj7g2" Oct 2 19:11:50.266823 kubelet[1982]: E1002 19:11:50.266810 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-74b9887bb6-nj7g2_calico-system(ed9546b3-459e-4894-8abb-08ca86f0fc00)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-74b9887bb6-nj7g2_calico-system(ed9546b3-459e-4894-8abb-08ca86f0fc00)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-74b9887bb6-nj7g2" podUID="ed9546b3-459e-4894-8abb-08ca86f0fc00" Oct 2 19:11:50.277579 env[1105]: time="2023-10-02T19:11:50.277521511Z" level=error msg="Failed to destroy network for sandbox \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.278054 env[1105]: time="2023-10-02T19:11:50.278007294Z" level=error msg="encountered an error cleaning up failed sandbox \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.278205 env[1105]: time="2023-10-02T19:11:50.278058170Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-zpf5d,Uid:a98068cd-fff0-4619-893b-592048280adf,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.278320 kubelet[1982]: E1002 19:11:50.278294 1982 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.278409 kubelet[1982]: E1002 19:11:50.278351 1982 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-zpf5d" Oct 2 19:11:50.278409 kubelet[1982]: E1002 19:11:50.278372 1982 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-zpf5d" Oct 2 19:11:50.278495 kubelet[1982]: E1002 19:11:50.278431 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-zpf5d_kube-system(a98068cd-fff0-4619-893b-592048280adf)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-zpf5d_kube-system(a98068cd-fff0-4619-893b-592048280adf)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-zpf5d" podUID="a98068cd-fff0-4619-893b-592048280adf" Oct 2 19:11:50.283937 env[1105]: time="2023-10-02T19:11:50.283856174Z" level=error msg="Failed to destroy network for sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.284278 env[1105]: time="2023-10-02T19:11:50.284242240Z" level=error msg="encountered an error cleaning up failed sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.284347 env[1105]: time="2023-10-02T19:11:50.284303305Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-n92cw,Uid:2abd516e-6d98-4ceb-865f-dc4a20fb9578,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.284536 kubelet[1982]: E1002 19:11:50.284519 1982 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:50.284591 kubelet[1982]: E1002 19:11:50.284558 1982 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-n92cw" Oct 2 19:11:50.284591 kubelet[1982]: E1002 19:11:50.284576 1982 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-n92cw" Oct 2 19:11:50.284643 kubelet[1982]: E1002 19:11:50.284619 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-n92cw_calico-system(2abd516e-6d98-4ceb-865f-dc4a20fb9578)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-n92cw_calico-system(2abd516e-6d98-4ceb-865f-dc4a20fb9578)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-n92cw" podUID="2abd516e-6d98-4ceb-865f-dc4a20fb9578" Oct 2 19:11:50.758962 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1-shm.mount: Deactivated successfully. Oct 2 19:11:51.241082 kubelet[1982]: I1002 19:11:51.241039 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:11:51.241593 env[1105]: time="2023-10-02T19:11:51.241557633Z" level=info msg="StopPodSandbox for \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\"" Oct 2 19:11:51.241953 kubelet[1982]: I1002 19:11:51.241932 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:11:51.242242 env[1105]: time="2023-10-02T19:11:51.242210421Z" level=info msg="StopPodSandbox for \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\"" Oct 2 19:11:51.242844 kubelet[1982]: I1002 19:11:51.242828 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:11:51.243169 env[1105]: time="2023-10-02T19:11:51.243134388Z" level=info msg="StopPodSandbox for \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\"" Oct 2 19:11:51.244149 kubelet[1982]: I1002 19:11:51.244127 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" Oct 2 19:11:51.244647 env[1105]: time="2023-10-02T19:11:51.244607628Z" level=info msg="StopPodSandbox for \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\"" Oct 2 19:11:51.272148 env[1105]: time="2023-10-02T19:11:51.272044530Z" level=error msg="StopPodSandbox for \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\" failed" error="failed to destroy network for sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:51.272834 kubelet[1982]: E1002 19:11:51.272789 1982 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:11:51.273797 kubelet[1982]: E1002 19:11:51.273767 1982 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1"} Oct 2 19:11:51.273854 kubelet[1982]: E1002 19:11:51.273827 1982 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"19055d5c-0e0a-48aa-b10b-d45f21731b0f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:11:51.273946 kubelet[1982]: E1002 19:11:51.273857 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"19055d5c-0e0a-48aa-b10b-d45f21731b0f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-gptkl" podUID="19055d5c-0e0a-48aa-b10b-d45f21731b0f" Oct 2 19:11:51.279198 env[1105]: time="2023-10-02T19:11:51.279119074Z" level=error msg="StopPodSandbox for \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\" failed" error="failed to destroy network for sandbox \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:51.279630 kubelet[1982]: E1002 19:11:51.279605 1982 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" Oct 2 19:11:51.279697 kubelet[1982]: E1002 19:11:51.279657 1982 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e"} Oct 2 19:11:51.279744 kubelet[1982]: E1002 19:11:51.279705 1982 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a98068cd-fff0-4619-893b-592048280adf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:11:51.279808 kubelet[1982]: E1002 19:11:51.279759 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a98068cd-fff0-4619-893b-592048280adf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-zpf5d" podUID="a98068cd-fff0-4619-893b-592048280adf" Oct 2 19:11:51.281557 env[1105]: time="2023-10-02T19:11:51.281508667Z" level=error msg="StopPodSandbox for \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\" failed" error="failed to destroy network for sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:51.281762 kubelet[1982]: E1002 19:11:51.281639 1982 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:11:51.281762 kubelet[1982]: E1002 19:11:51.281656 1982 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b"} Oct 2 19:11:51.281762 kubelet[1982]: E1002 19:11:51.281683 1982 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ed9546b3-459e-4894-8abb-08ca86f0fc00\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:11:51.281762 kubelet[1982]: E1002 19:11:51.281710 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ed9546b3-459e-4894-8abb-08ca86f0fc00\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-74b9887bb6-nj7g2" podUID="ed9546b3-459e-4894-8abb-08ca86f0fc00" Oct 2 19:11:51.283991 env[1105]: time="2023-10-02T19:11:51.283953083Z" level=error msg="StopPodSandbox for \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\" failed" error="failed to destroy network for sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:11:51.284151 kubelet[1982]: E1002 19:11:51.284133 1982 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:11:51.284198 kubelet[1982]: E1002 19:11:51.284155 1982 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347"} Oct 2 19:11:51.284198 kubelet[1982]: E1002 19:11:51.284181 1982 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2abd516e-6d98-4ceb-865f-dc4a20fb9578\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:11:51.284267 kubelet[1982]: E1002 19:11:51.284203 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2abd516e-6d98-4ceb-865f-dc4a20fb9578\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-n92cw" podUID="2abd516e-6d98-4ceb-865f-dc4a20fb9578" Oct 2 19:11:51.759502 env[1105]: time="2023-10-02T19:11:51.759414117Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node:v3.25.0\": failed to copy: write /var/lib/containerd/io.containerd.content.v1.content/ingest/1fab65342f334b157e44a223ac8e0e976bd457c317624c7bcd0e8c67ccd95131/data: no space left on device" Oct 2 19:11:51.759830 kubelet[1982]: E1002 19:11:51.759788 1982 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node:v3.25.0\": failed to copy: write /var/lib/containerd/io.containerd.content.v1.content/ingest/1fab65342f334b157e44a223ac8e0e976bd457c317624c7bcd0e8c67ccd95131/data: no space left on device" image="ghcr.io/flatcar/calico/node:v3.25.0" Oct 2 19:11:51.759958 kubelet[1982]: E1002 19:11:51.759850 1982 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/node:v3.25.0\": failed to copy: write /var/lib/containerd/io.containerd.content.v1.content/ingest/1fab65342f334b157e44a223ac8e0e976bd457c317624c7bcd0e8c67ccd95131/data: no space left on device" image="ghcr.io/flatcar/calico/node:v3.25.0" Oct 2 19:11:51.764282 kubelet[1982]: E1002 19:11:51.764204 1982 kuberuntime_manager.go:1209] container &Container{Name:calico-node,Image:ghcr.io/flatcar/calico/node:v3.25.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:WAIT_FOR_DATASTORE,Value:true,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:k8s,operator,bgp,ValueFrom:nil,},EnvVar{Name:CALICO_DISABLE_FILE_LOGGING,Value:false,ValueFrom:nil,},EnvVar{Name:FELIX_DEFAULTENDPOINTTOHOSTACTION,Value:ACCEPT,ValueFrom:nil,},EnvVar{Name:FELIX_HEALTHENABLED,Value:true,ValueFrom:nil,},EnvVar{Name:FELIX_HEALTHPORT,Value:9099,ValueFrom:nil,},EnvVar{Name:NODENAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:NAMESPACE,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:FELIX_TYPHAK8SNAMESPACE,Value:calico-system,ValueFrom:nil,},EnvVar{Name:FELIX_TYPHAK8SSERVICENAME,Value:calico-typha,ValueFrom:nil,},EnvVar{Name:FELIX_TYPHACAFILE,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:FELIX_TYPHACERTFILE,Value:/node-certs/tls.crt,ValueFrom:nil,},EnvVar{Name:FELIX_TYPHAKEYFILE,Value:/node-certs/tls.key,ValueFrom:nil,},EnvVar{Name:FIPS_MODE_ENABLED,Value:false,ValueFrom:nil,},EnvVar{Name:FELIX_TYPHACN,Value:typha-server,ValueFrom:nil,},EnvVar{Name:CALICO_MANAGE_CNI,Value:true,ValueFrom:nil,},EnvVar{Name:CALICO_IPV4POOL_CIDR,Value:192.168.0.0/17,ValueFrom:nil,},EnvVar{Name:CALICO_IPV4POOL_VXLAN,Value:CrossSubnet,ValueFrom:nil,},EnvVar{Name:CALICO_IPV4POOL_BLOCK_SIZE,Value:26,ValueFrom:nil,},EnvVar{Name:CALICO_IPV4POOL_NODE_SELECTOR,Value:all(),ValueFrom:nil,},EnvVar{Name:CALICO_IPV4POOL_DISABLE_BGP_EXPORT,Value:false,ValueFrom:nil,},EnvVar{Name:CALICO_NETWORKING_BACKEND,Value:bird,ValueFrom:nil,},EnvVar{Name:IP,Value:autodetect,ValueFrom:nil,},EnvVar{Name:IP_AUTODETECTION_METHOD,Value:first-found,ValueFrom:nil,},EnvVar{Name:IP6,Value:none,ValueFrom:nil,},EnvVar{Name:FELIX_IPV6SUPPORT,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:lib-modules,ReadOnly:true,MountPath:/lib/modules,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:xtables-lock,ReadOnly:false,MountPath:/run/xtables.lock,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:policysync,ReadOnly:false,MountPath:/var/run/nodeagent,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs/,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:node-certs,ReadOnly:true,MountPath:/node-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:var-run-calico,ReadOnly:false,MountPath:/var/run/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:var-lib-calico,ReadOnly:false,MountPath:/var/lib/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-log-dir,ReadOnly:false,MountPath:/var/log/calico/cni,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-net-dir,ReadOnly:false,MountPath:/host/etc/cni/net.d,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-sqbgj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/liveness,Port:{0 9099 },Host:localhost,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/bin/calico-node -bird-ready -felix-ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:&Lifecycle{PostStart:nil,PreStop:&LifecycleHandler{Exec:&ExecAction{Command:[/bin/calico-node -shutdown],},HTTPGet:nil,TCPSocket:nil,},},TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-node-85xhn_calico-system(36abc540-f458-4638-ba4c-595593660e40): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/node:v3.25.0": failed to copy: write /var/lib/containerd/io.containerd.content.v1.content/ingest/1fab65342f334b157e44a223ac8e0e976bd457c317624c7bcd0e8c67ccd95131/data: no space left on device Oct 2 19:11:51.764282 kubelet[1982]: E1002 19:11:51.764263 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-node\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node:v3.25.0\\\": failed to copy: write /var/lib/containerd/io.containerd.content.v1.content/ingest/1fab65342f334b157e44a223ac8e0e976bd457c317624c7bcd0e8c67ccd95131/data: no space left on device\"" pod="calico-system/calico-node-85xhn" podUID="36abc540-f458-4638-ba4c-595593660e40" Oct 2 19:11:52.246772 kubelet[1982]: E1002 19:11:52.246740 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:52.248058 kubelet[1982]: E1002 19:11:52.248022 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-node\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node:v3.25.0\\\"\"" pod="calico-system/calico-node-85xhn" podUID="36abc540-f458-4638-ba4c-595593660e40" Oct 2 19:11:54.278855 systemd[1]: Started sshd@8-10.0.0.69:22-10.0.0.1:40798.service. Oct 2 19:11:54.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.69:22-10.0.0.1:40798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:54.281895 kernel: audit: type=1130 audit(1696273914.278:1150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.69:22-10.0.0.1:40798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:54.311113 sshd[2993]: Accepted publickey for core from 10.0.0.1 port 40798 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:11:54.310000 audit[2993]: USER_ACCT pid=2993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:54.313000 audit[2993]: CRED_ACQ pid=2993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:54.315112 sshd[2993]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:54.318331 kernel: audit: type=1101 audit(1696273914.310:1151): pid=2993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:54.318380 kernel: audit: type=1103 audit(1696273914.313:1152): pid=2993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:54.318399 kernel: audit: type=1006 audit(1696273914.313:1153): pid=2993 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:11:54.318635 systemd-logind[1090]: New session 9 of user core. Oct 2 19:11:54.313000 audit[2993]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe815e4d10 a2=3 a3=0 items=0 ppid=1 pid=2993 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:54.319814 systemd[1]: Started session-9.scope. Oct 2 19:11:54.323063 kernel: audit: type=1300 audit(1696273914.313:1153): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe815e4d10 a2=3 a3=0 items=0 ppid=1 pid=2993 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:54.323114 kernel: audit: type=1327 audit(1696273914.313:1153): proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:54.313000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:54.324000 audit[2993]: USER_START pid=2993 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:54.325000 audit[2995]: CRED_ACQ pid=2995 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:54.331341 kernel: audit: type=1105 audit(1696273914.324:1154): pid=2993 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:54.331402 kernel: audit: type=1103 audit(1696273914.325:1155): pid=2995 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:54.440468 sshd[2993]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:54.440000 audit[2993]: USER_END pid=2993 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:54.442727 systemd[1]: sshd@8-10.0.0.69:22-10.0.0.1:40798.service: Deactivated successfully. Oct 2 19:11:54.443439 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:11:54.444117 systemd-logind[1090]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:11:54.440000 audit[2993]: CRED_DISP pid=2993 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:54.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.69:22-10.0.0.1:40798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:54.444906 kernel: audit: type=1106 audit(1696273914.440:1156): pid=2993 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:54.444976 systemd-logind[1090]: Removed session 9. Oct 2 19:11:56.242340 kubelet[1982]: I1002 19:11:56.242298 1982 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:11:56.242340 kubelet[1982]: I1002 19:11:56.242333 1982 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:11:56.288753 kubelet[1982]: I1002 19:11:56.288701 1982 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:11:56.290936 kubelet[1982]: I1002 19:11:56.290915 1982 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9" size=102894559 Oct 2 19:11:56.291251 env[1105]: time="2023-10-02T19:11:56.291202186Z" level=info msg="RemoveImage \"sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9\"" Oct 2 19:11:56.331290 env[1105]: time="2023-10-02T19:11:56.331229331Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.9-0,XXX_unrecognized:[],}" Oct 2 19:11:56.335707 env[1105]: time="2023-10-02T19:11:56.335668743Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,XXX_unrecognized:[],}" Oct 2 19:11:56.337503 env[1105]: time="2023-10-02T19:11:56.337475668Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9,XXX_unrecognized:[],}" Oct 2 19:11:56.350843 env[1105]: time="2023-10-02T19:11:56.350780660Z" level=info msg="RemoveImage \"sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9\" returns successfully" Oct 2 19:11:56.351242 kubelet[1982]: I1002 19:11:56.351191 1982 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc" size=16190758 Oct 2 19:11:56.351512 env[1105]: time="2023-10-02T19:11:56.351475175Z" level=info msg="RemoveImage \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:11:56.353400 env[1105]: time="2023-10-02T19:11:56.353367421Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.10.1,XXX_unrecognized:[],}" Oct 2 19:11:56.354622 env[1105]: time="2023-10-02T19:11:56.354589497Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,XXX_unrecognized:[],}" Oct 2 19:11:56.355628 env[1105]: time="2023-10-02T19:11:56.355591140Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,XXX_unrecognized:[],}" Oct 2 19:11:56.365580 env[1105]: time="2023-10-02T19:11:56.365533201Z" level=info msg="RemoveImage \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\" returns successfully" Oct 2 19:11:56.365841 kubelet[1982]: I1002 19:11:56.365807 1982 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" size=301773 Oct 2 19:11:56.366124 env[1105]: time="2023-10-02T19:11:56.366090038Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\"" Oct 2 19:11:56.367208 env[1105]: time="2023-10-02T19:11:56.367178253Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:11:56.368082 env[1105]: time="2023-10-02T19:11:56.368045773Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:11:56.368797 env[1105]: time="2023-10-02T19:11:56.368751980Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,XXX_unrecognized:[],}" Oct 2 19:11:56.371444 env[1105]: time="2023-10-02T19:11:56.371411748Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\" returns successfully" Oct 2 19:11:56.381161 kubelet[1982]: I1002 19:11:56.381138 1982 eviction_manager.go:349] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:12:03.160166 env[1105]: time="2023-10-02T19:12:03.159992979Z" level=info msg="StopPodSandbox for \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\"" Oct 2 19:12:03.185265 env[1105]: time="2023-10-02T19:12:03.185201849Z" level=error msg="StopPodSandbox for \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\" failed" error="failed to destroy network for sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:12:03.185554 kubelet[1982]: E1002 19:12:03.185520 1982 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:03.185784 kubelet[1982]: E1002 19:12:03.185568 1982 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1"} Oct 2 19:12:03.185784 kubelet[1982]: E1002 19:12:03.185608 1982 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"19055d5c-0e0a-48aa-b10b-d45f21731b0f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:12:03.185784 kubelet[1982]: E1002 19:12:03.185635 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"19055d5c-0e0a-48aa-b10b-d45f21731b0f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-gptkl" podUID="19055d5c-0e0a-48aa-b10b-d45f21731b0f" Oct 2 19:12:04.160633 kubelet[1982]: E1002 19:12:04.160174 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:04.161323 env[1105]: time="2023-10-02T19:12:04.161288962Z" level=info msg="StopPodSandbox for \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\"" Oct 2 19:12:04.162040 env[1105]: time="2023-10-02T19:12:04.161613832Z" level=info msg="StopPodSandbox for \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\"" Oct 2 19:12:04.162345 env[1105]: time="2023-10-02T19:12:04.162150880Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 19:12:04.162519 env[1105]: time="2023-10-02T19:12:04.162211024Z" level=info msg="StopPodSandbox for \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\"" Oct 2 19:12:04.197579 env[1105]: time="2023-10-02T19:12:04.197514834Z" level=error msg="StopPodSandbox for \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\" failed" error="failed to destroy network for sandbox \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:12:04.198029 kubelet[1982]: E1002 19:12:04.197994 1982 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" Oct 2 19:12:04.198273 kubelet[1982]: E1002 19:12:04.198045 1982 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e"} Oct 2 19:12:04.198273 kubelet[1982]: E1002 19:12:04.198121 1982 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a98068cd-fff0-4619-893b-592048280adf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:12:04.198273 kubelet[1982]: E1002 19:12:04.198153 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a98068cd-fff0-4619-893b-592048280adf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-zpf5d" podUID="a98068cd-fff0-4619-893b-592048280adf" Oct 2 19:12:04.202582 env[1105]: time="2023-10-02T19:12:04.202520554Z" level=error msg="StopPodSandbox for \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\" failed" error="failed to destroy network for sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:12:04.202758 kubelet[1982]: E1002 19:12:04.202733 1982 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:04.202852 kubelet[1982]: E1002 19:12:04.202771 1982 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b"} Oct 2 19:12:04.202852 kubelet[1982]: E1002 19:12:04.202804 1982 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ed9546b3-459e-4894-8abb-08ca86f0fc00\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:12:04.202852 kubelet[1982]: E1002 19:12:04.202832 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ed9546b3-459e-4894-8abb-08ca86f0fc00\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-74b9887bb6-nj7g2" podUID="ed9546b3-459e-4894-8abb-08ca86f0fc00" Oct 2 19:12:04.207305 env[1105]: time="2023-10-02T19:12:04.207267187Z" level=error msg="StopPodSandbox for \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\" failed" error="failed to destroy network for sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:12:04.207488 kubelet[1982]: E1002 19:12:04.207466 1982 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:04.207544 kubelet[1982]: E1002 19:12:04.207490 1982 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347"} Oct 2 19:12:04.207544 kubelet[1982]: E1002 19:12:04.207519 1982 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2abd516e-6d98-4ceb-865f-dc4a20fb9578\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:12:04.207544 kubelet[1982]: E1002 19:12:04.207541 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2abd516e-6d98-4ceb-865f-dc4a20fb9578\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-n92cw" podUID="2abd516e-6d98-4ceb-865f-dc4a20fb9578" Oct 2 19:12:04.445275 systemd[1]: Started sshd@9-10.0.0.69:22-10.0.0.1:53954.service. Oct 2 19:12:04.446119 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:12:04.446151 kernel: audit: type=1130 audit(1696273924.444:1159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.69:22-10.0.0.1:53954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.69:22-10.0.0.1:53954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.473000 audit[3101]: USER_ACCT pid=3101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.474637 sshd[3101]: Accepted publickey for core from 10.0.0.1 port 53954 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:12:04.476259 sshd[3101]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:04.475000 audit[3101]: CRED_ACQ pid=3101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.479932 systemd-logind[1090]: New session 10 of user core. Oct 2 19:12:04.480318 kernel: audit: type=1101 audit(1696273924.473:1160): pid=3101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.480355 kernel: audit: type=1103 audit(1696273924.475:1161): pid=3101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.480378 kernel: audit: type=1006 audit(1696273924.475:1162): pid=3101 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:12:04.480921 systemd[1]: Started session-10.scope. Oct 2 19:12:04.481778 kernel: audit: type=1300 audit(1696273924.475:1162): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff51280a30 a2=3 a3=0 items=0 ppid=1 pid=3101 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:04.475000 audit[3101]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff51280a30 a2=3 a3=0 items=0 ppid=1 pid=3101 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:04.475000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:04.485274 kernel: audit: type=1327 audit(1696273924.475:1162): proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:04.485000 audit[3101]: USER_START pid=3101 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.486000 audit[3103]: CRED_ACQ pid=3103 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.492574 kernel: audit: type=1105 audit(1696273924.485:1163): pid=3101 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.492640 kernel: audit: type=1103 audit(1696273924.486:1164): pid=3103 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.592175 sshd[3101]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:04.592000 audit[3101]: USER_END pid=3101 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.595445 systemd[1]: sshd@9-10.0.0.69:22-10.0.0.1:53954.service: Deactivated successfully. Oct 2 19:12:04.596106 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:12:04.592000 audit[3101]: CRED_DISP pid=3101 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.596714 systemd-logind[1090]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:12:04.597780 systemd[1]: Started sshd@10-10.0.0.69:22-10.0.0.1:53964.service. Oct 2 19:12:04.598625 systemd-logind[1090]: Removed session 10. Oct 2 19:12:04.599163 kernel: audit: type=1106 audit(1696273924.592:1165): pid=3101 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.599285 kernel: audit: type=1104 audit(1696273924.592:1166): pid=3101 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.69:22-10.0.0.1:53954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.69:22-10.0.0.1:53964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.625000 audit[3115]: USER_ACCT pid=3115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.626787 sshd[3115]: Accepted publickey for core from 10.0.0.1 port 53964 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:12:04.626000 audit[3115]: CRED_ACQ pid=3115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.626000 audit[3115]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9b7a7bb0 a2=3 a3=0 items=0 ppid=1 pid=3115 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:04.626000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:04.627775 sshd[3115]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:04.631238 systemd-logind[1090]: New session 11 of user core. Oct 2 19:12:04.632323 systemd[1]: Started session-11.scope. Oct 2 19:12:04.636000 audit[3115]: USER_START pid=3115 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.637000 audit[3117]: CRED_ACQ pid=3117 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.912020 sshd[3115]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:04.911000 audit[3115]: USER_END pid=3115 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.912000 audit[3115]: CRED_DISP pid=3115 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.914756 systemd[1]: sshd@10-10.0.0.69:22-10.0.0.1:53964.service: Deactivated successfully. Oct 2 19:12:04.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.69:22-10.0.0.1:53964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.915251 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:12:04.915722 systemd-logind[1090]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:12:04.916540 systemd[1]: Started sshd@11-10.0.0.69:22-10.0.0.1:53980.service. Oct 2 19:12:04.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.69:22-10.0.0.1:53980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.917147 systemd-logind[1090]: Removed session 11. Oct 2 19:12:04.956000 audit[3126]: USER_ACCT pid=3126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.958049 sshd[3126]: Accepted publickey for core from 10.0.0.1 port 53980 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:12:04.957000 audit[3126]: CRED_ACQ pid=3126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.957000 audit[3126]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe603c010 a2=3 a3=0 items=0 ppid=1 pid=3126 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:04.957000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:04.958969 sshd[3126]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:04.962131 systemd-logind[1090]: New session 12 of user core. Oct 2 19:12:04.962925 systemd[1]: Started session-12.scope. Oct 2 19:12:04.965000 audit[3126]: USER_START pid=3126 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:04.966000 audit[3128]: CRED_ACQ pid=3128 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:05.288866 sshd[3126]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:05.289000 audit[3126]: USER_END pid=3126 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:05.289000 audit[3126]: CRED_DISP pid=3126 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:05.291315 systemd[1]: sshd@11-10.0.0.69:22-10.0.0.1:53980.service: Deactivated successfully. Oct 2 19:12:05.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.69:22-10.0.0.1:53980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:05.292252 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:12:05.292809 systemd-logind[1090]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:12:05.293597 systemd-logind[1090]: Removed session 12. Oct 2 19:12:09.443847 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2918894714.mount: Deactivated successfully. Oct 2 19:12:09.672249 env[1105]: time="2023-10-02T19:12:09.672187723Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:09.673984 env[1105]: time="2023-10-02T19:12:09.673946634Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:09.675390 env[1105]: time="2023-10-02T19:12:09.675367773Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:09.676509 env[1105]: time="2023-10-02T19:12:09.676452829Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:09.676918 env[1105]: time="2023-10-02T19:12:09.676891463Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e\"" Oct 2 19:12:09.678736 env[1105]: time="2023-10-02T19:12:09.678709475Z" level=info msg="CreateContainer within sandbox \"f58287b84c02d311563318ba6d075388b3553de63406b98e5bd2b9dd86b07256\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 19:12:09.690199 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3984293604.mount: Deactivated successfully. Oct 2 19:12:09.701169 env[1105]: time="2023-10-02T19:12:09.701044883Z" level=info msg="CreateContainer within sandbox \"f58287b84c02d311563318ba6d075388b3553de63406b98e5bd2b9dd86b07256\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"d55888015a47fbf90e71396950715730e4779b08229cc81d3201478fb176ae00\"" Oct 2 19:12:09.701747 env[1105]: time="2023-10-02T19:12:09.701702838Z" level=info msg="StartContainer for \"d55888015a47fbf90e71396950715730e4779b08229cc81d3201478fb176ae00\"" Oct 2 19:12:09.722709 systemd[1]: Started cri-containerd-d55888015a47fbf90e71396950715730e4779b08229cc81d3201478fb176ae00.scope. Oct 2 19:12:09.734000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.736313 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:12:09.736365 kernel: audit: type=1400 audit(1696273929.734:1186): avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.734000 audit[3146]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2414 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:09.741248 kernel: audit: type=1300 audit(1696273929.734:1186): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2414 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:09.741305 kernel: audit: type=1327 audit(1696273929.734:1186): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435353838383031356134376662663930653731333936393530373135 Oct 2 19:12:09.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435353838383031356134376662663930653731333936393530373135 Oct 2 19:12:09.734000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.745898 kernel: audit: type=1400 audit(1696273929.734:1187): avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.745975 kernel: audit: type=1400 audit(1696273929.734:1187): avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.734000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.734000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.750965 kernel: audit: type=1400 audit(1696273929.734:1187): avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.734000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.755024 kernel: audit: type=1400 audit(1696273929.734:1187): avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.755075 kernel: audit: type=1400 audit(1696273929.734:1187): avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.734000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.734000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.757330 kernel: audit: type=1400 audit(1696273929.734:1187): avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.757434 kernel: audit: type=1400 audit(1696273929.734:1187): avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.734000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.734000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.734000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.734000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.734000 audit: BPF prog-id=145 op=LOAD Oct 2 19:12:09.734000 audit[3146]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003c6070 items=0 ppid=2414 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:09.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435353838383031356134376662663930653731333936393530373135 Oct 2 19:12:09.737000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.737000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.737000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.737000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.737000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.737000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.737000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.737000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.737000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.737000 audit: BPF prog-id=146 op=LOAD Oct 2 19:12:09.737000 audit[3146]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003c60b8 items=0 ppid=2414 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:09.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435353838383031356134376662663930653731333936393530373135 Oct 2 19:12:09.740000 audit: BPF prog-id=146 op=UNLOAD Oct 2 19:12:09.740000 audit: BPF prog-id=145 op=UNLOAD Oct 2 19:12:09.740000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.740000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.740000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.740000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.740000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.740000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.740000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.740000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.740000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.740000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:09.740000 audit: BPF prog-id=147 op=LOAD Oct 2 19:12:09.740000 audit[3146]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003c6148 items=0 ppid=2414 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:09.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435353838383031356134376662663930653731333936393530373135 Oct 2 19:12:09.762539 env[1105]: time="2023-10-02T19:12:09.762458237Z" level=info msg="StartContainer for \"d55888015a47fbf90e71396950715730e4779b08229cc81d3201478fb176ae00\" returns successfully" Oct 2 19:12:09.824337 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 19:12:09.824469 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 19:12:10.284099 kubelet[1982]: E1002 19:12:10.284038 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:11.093000 audit[3272]: AVC avc: denied { write } for pid=3272 comm="tee" name="fd" dev="proc" ino=25884 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:12:11.093000 audit[3272]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe07d8698f a2=241 a3=1b6 items=1 ppid=3251 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.093000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 19:12:11.093000 audit: PATH item=0 name="/dev/fd/63" inode=25874 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:11.093000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:12:11.096000 audit[3280]: AVC avc: denied { write } for pid=3280 comm="tee" name="fd" dev="proc" ino=23103 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:12:11.096000 audit[3280]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffa924f98f a2=241 a3=1b6 items=1 ppid=3245 pid=3280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.096000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 19:12:11.096000 audit: PATH item=0 name="/dev/fd/63" inode=25881 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:11.096000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:12:11.109000 audit[3309]: AVC avc: denied { write } for pid=3309 comm="tee" name="fd" dev="proc" ino=24336 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:12:11.109000 audit[3309]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff0bf1f97f a2=241 a3=1b6 items=1 ppid=3238 pid=3309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.109000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 19:12:11.109000 audit: PATH item=0 name="/dev/fd/63" inode=25897 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:11.109000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:12:11.112000 audit[3315]: AVC avc: denied { write } for pid=3315 comm="tee" name="fd" dev="proc" ino=24343 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:12:11.112000 audit[3315]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd4cb3d980 a2=241 a3=1b6 items=1 ppid=3240 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.112000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 19:12:11.112000 audit: PATH item=0 name="/dev/fd/63" inode=24340 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:11.112000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:12:11.130000 audit[3295]: AVC avc: denied { write } for pid=3295 comm="tee" name="fd" dev="proc" ino=25903 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:12:11.134000 audit[3298]: AVC avc: denied { write } for pid=3298 comm="tee" name="fd" dev="proc" ino=25906 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:12:11.134000 audit[3298]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffbed3598f a2=241 a3=1b6 items=1 ppid=3242 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.134000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 19:12:11.134000 audit: PATH item=0 name="/dev/fd/63" inode=23110 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:11.134000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:12:11.142000 audit[3301]: AVC avc: denied { write } for pid=3301 comm="tee" name="fd" dev="proc" ino=25137 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:12:11.130000 audit[3295]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd7406b991 a2=241 a3=1b6 items=1 ppid=3254 pid=3295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.130000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 19:12:11.130000 audit: PATH item=0 name="/dev/fd/63" inode=23109 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:11.130000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:12:11.142000 audit[3301]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff13791990 a2=241 a3=1b6 items=1 ppid=3244 pid=3301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.142000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 19:12:11.142000 audit: PATH item=0 name="/dev/fd/63" inode=24331 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:11.142000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:12:11.286048 kubelet[1982]: E1002 19:12:11.285999 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit: BPF prog-id=148 op=LOAD Oct 2 19:12:11.414000 audit[3411]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe2beed360 a2=70 a3=7fe96bd95000 items=0 ppid=3243 pid=3411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.414000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:12:11.414000 audit: BPF prog-id=148 op=UNLOAD Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit: BPF prog-id=149 op=LOAD Oct 2 19:12:11.414000 audit[3411]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe2beed360 a2=70 a3=6e items=0 ppid=3243 pid=3411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.414000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:12:11.414000 audit: BPF prog-id=149 op=UNLOAD Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe2beed310 a2=70 a3=7ffe2beed360 items=0 ppid=3243 pid=3411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.414000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit: BPF prog-id=150 op=LOAD Oct 2 19:12:11.414000 audit[3411]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe2beed2f0 a2=70 a3=7ffe2beed360 items=0 ppid=3243 pid=3411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.414000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:12:11.414000 audit: BPF prog-id=150 op=UNLOAD Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe2beed3d0 a2=70 a3=0 items=0 ppid=3243 pid=3411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.414000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe2beed3c0 a2=70 a3=0 items=0 ppid=3243 pid=3411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.414000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:12:11.414000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.414000 audit[3411]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffe2beed400 a2=70 a3=0 items=0 ppid=3243 pid=3411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.414000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:12:11.415000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.415000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.415000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.415000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.415000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.415000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.415000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.415000 audit[3411]: AVC avc: denied { perfmon } for pid=3411 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.415000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.415000 audit[3411]: AVC avc: denied { bpf } for pid=3411 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.415000 audit: BPF prog-id=151 op=LOAD Oct 2 19:12:11.415000 audit[3411]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe2beed320 a2=70 a3=ffffffff items=0 ppid=3243 pid=3411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.415000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:12:11.417000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.417000 audit[3415]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffb714ca40 a2=70 a3=208 items=0 ppid=3243 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.417000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:12:11.417000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:11.417000 audit[3415]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffb714c910 a2=70 a3=3 items=0 ppid=3243 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.417000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:12:11.424000 audit: BPF prog-id=151 op=UNLOAD Oct 2 19:12:11.489000 audit[3446]: NETFILTER_CFG table=mangle:99 family=2 entries=19 op=nft_register_chain pid=3446 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:12:11.489000 audit[3446]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7ffd8a3cc7f0 a2=0 a3=7ffd8a3cc7dc items=0 ppid=3243 pid=3446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.489000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:12:11.494000 audit[3444]: NETFILTER_CFG table=raw:100 family=2 entries=19 op=nft_register_chain pid=3444 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:12:11.494000 audit[3444]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffc7a36ae20 a2=0 a3=5621347a9000 items=0 ppid=3243 pid=3444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.494000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:12:11.495000 audit[3445]: NETFILTER_CFG table=nat:101 family=2 entries=16 op=nft_register_chain pid=3445 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:12:11.495000 audit[3445]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7fff131cc9f0 a2=0 a3=55e144bd3000 items=0 ppid=3243 pid=3445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.495000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:12:11.495000 audit[3448]: NETFILTER_CFG table=filter:102 family=2 entries=39 op=nft_register_chain pid=3448 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:12:11.495000 audit[3448]: SYSCALL arch=c000003e syscall=46 success=yes exit=18472 a0=3 a1=7ffe3fae9690 a2=0 a3=5647d94ca000 items=0 ppid=3243 pid=3448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:11.495000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:12:12.345212 systemd-networkd[1004]: vxlan.calico: Link UP Oct 2 19:12:12.345221 systemd-networkd[1004]: vxlan.calico: Gained carrier Oct 2 19:12:12.415000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:12.415000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:12.415000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002a7cce0 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:12:12.415000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:12.415000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0023ecc00 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:12:12.415000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:13.064000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:13.064000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:13.064000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:13.064000 audit[1862]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c0130d0930 a2=fc6 a3=0 items=0 ppid=1704 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 key=(null) Oct 2 19:12:13.064000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:13.064000 audit[1862]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c004f23da0 a2=fc6 a3=0 items=0 ppid=1704 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 key=(null) Oct 2 19:12:13.064000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:13.064000 audit[1862]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c005fc8ec0 a2=fc6 a3=0 items=0 ppid=1704 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 key=(null) Oct 2 19:12:13.064000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:13.122000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:13.122000 audit[1862]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0056fb8e0 a2=fc6 a3=0 items=0 ppid=1704 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 key=(null) Oct 2 19:12:13.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:13.122000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:13.122000 audit[1862]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0130d0a80 a2=fc6 a3=0 items=0 ppid=1704 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 key=(null) Oct 2 19:12:13.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:13.123000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4783 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:13.123000 audit[1862]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c004f23ef0 a2=fc6 a3=0 items=0 ppid=1704 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c466 key=(null) Oct 2 19:12:13.123000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3639002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:13.388022 systemd-networkd[1004]: vxlan.calico: Gained IPv6LL Oct 2 19:12:15.159837 env[1105]: time="2023-10-02T19:12:15.159788871Z" level=info msg="StopPodSandbox for \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\"" Oct 2 19:12:15.214032 kubelet[1982]: I1002 19:12:15.213984 1982 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-85xhn" podStartSLOduration=7.360660791 podCreationTimestamp="2023-10-02 19:11:36 +0000 UTC" firstStartedPulling="2023-10-02 19:11:37.823809527 +0000 UTC m=+21.747025954" lastFinishedPulling="2023-10-02 19:12:09.677094123 +0000 UTC m=+53.600310550" observedRunningTime="2023-10-02 19:12:10.296626559 +0000 UTC m=+54.219843016" watchObservedRunningTime="2023-10-02 19:12:15.213945387 +0000 UTC m=+59.137161814" Oct 2 19:12:15.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.69:22-10.0.0.1:42284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.293575 systemd[1]: Started sshd@12-10.0.0.69:22-10.0.0.1:42284.service. Oct 2 19:12:15.294430 kernel: kauditd_printk_skb: 175 callbacks suppressed Oct 2 19:12:15.294466 kernel: audit: type=1130 audit(1696273935.292:1225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.69:22-10.0.0.1:42284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.341603 kernel: audit: type=1101 audit(1696273935.329:1226): pid=3508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:15.341749 kernel: audit: type=1103 audit(1696273935.331:1227): pid=3508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:15.341770 kernel: audit: type=1006 audit(1696273935.331:1228): pid=3508 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:12:15.341788 kernel: audit: type=1300 audit(1696273935.331:1228): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1ca0bc80 a2=3 a3=0 items=0 ppid=1 pid=3508 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.329000 audit[3508]: USER_ACCT pid=3508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:15.331000 audit[3508]: CRED_ACQ pid=3508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:15.331000 audit[3508]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1ca0bc80 a2=3 a3=0 items=0 ppid=1 pid=3508 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.339977 systemd[1]: Started session-13.scope. Oct 2 19:12:15.332468 sshd[3508]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:15.342338 sshd[3508]: Accepted publickey for core from 10.0.0.1 port 42284 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:12:15.340918 systemd-logind[1090]: New session 13 of user core. Oct 2 19:12:15.343892 kernel: audit: type=1327 audit(1696273935.331:1228): proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:15.331000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:15.345000 audit[3508]: USER_START pid=3508 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:15.346000 audit[3513]: CRED_ACQ pid=3513 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:15.352002 kernel: audit: type=1105 audit(1696273935.345:1229): pid=3508 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:15.352077 kernel: audit: type=1103 audit(1696273935.346:1230): pid=3513 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:15.354773 env[1105]: 2023-10-02 19:12:15.214 [INFO][3494] k8s.go 576: Cleaning up netns ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:15.354773 env[1105]: 2023-10-02 19:12:15.214 [INFO][3494] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" iface="eth0" netns="/var/run/netns/cni-2c75241d-e453-ca0b-393d-1b5dd6d90cf1" Oct 2 19:12:15.354773 env[1105]: 2023-10-02 19:12:15.214 [INFO][3494] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" iface="eth0" netns="/var/run/netns/cni-2c75241d-e453-ca0b-393d-1b5dd6d90cf1" Oct 2 19:12:15.354773 env[1105]: 2023-10-02 19:12:15.215 [INFO][3494] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" iface="eth0" netns="/var/run/netns/cni-2c75241d-e453-ca0b-393d-1b5dd6d90cf1" Oct 2 19:12:15.354773 env[1105]: 2023-10-02 19:12:15.215 [INFO][3494] k8s.go 583: Releasing IP address(es) ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:15.354773 env[1105]: 2023-10-02 19:12:15.215 [INFO][3494] utils.go 196: Calico CNI releasing IP address ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:15.354773 env[1105]: 2023-10-02 19:12:15.320 [INFO][3502] ipam_plugin.go 416: Releasing address using handleID ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" HandleID="k8s-pod-network.c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Workload="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:15.354773 env[1105]: time="2023-10-02T19:12:15Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:15.354773 env[1105]: time="2023-10-02T19:12:15Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:15.354773 env[1105]: 2023-10-02 19:12:15.342 [WARNING][3502] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" HandleID="k8s-pod-network.c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Workload="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:15.354773 env[1105]: 2023-10-02 19:12:15.345 [INFO][3502] ipam_plugin.go 444: Releasing address using workloadID ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" HandleID="k8s-pod-network.c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Workload="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:15.354773 env[1105]: time="2023-10-02T19:12:15Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:15.354773 env[1105]: 2023-10-02 19:12:15.353 [INFO][3494] k8s.go 589: Teardown processing complete. ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:15.355441 env[1105]: time="2023-10-02T19:12:15.355390889Z" level=info msg="TearDown network for sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\" successfully" Oct 2 19:12:15.355441 env[1105]: time="2023-10-02T19:12:15.355426466Z" level=info msg="StopPodSandbox for \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\" returns successfully" Oct 2 19:12:15.355808 kubelet[1982]: E1002 19:12:15.355786 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:15.356482 env[1105]: time="2023-10-02T19:12:15.356459715Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-gptkl,Uid:19055d5c-0e0a-48aa-b10b-d45f21731b0f,Namespace:kube-system,Attempt:1,}" Oct 2 19:12:15.356928 systemd[1]: run-netns-cni\x2d2c75241d\x2de453\x2dca0b\x2d393d\x2d1b5dd6d90cf1.mount: Deactivated successfully. Oct 2 19:12:15.616745 sshd[3508]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:15.616000 audit[3508]: USER_END pid=3508 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:15.619121 systemd[1]: sshd@12-10.0.0.69:22-10.0.0.1:42284.service: Deactivated successfully. Oct 2 19:12:15.619784 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:12:15.620286 systemd-logind[1090]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:12:15.616000 audit[3508]: CRED_DISP pid=3508 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:15.621062 systemd-logind[1090]: Removed session 13. Oct 2 19:12:15.622864 kernel: audit: type=1106 audit(1696273935.616:1231): pid=3508 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:15.622922 kernel: audit: type=1104 audit(1696273935.616:1232): pid=3508 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:15.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.69:22-10.0.0.1:42284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.992620 env[1105]: time="2023-10-02T19:12:15.992567062Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:15.995160 env[1105]: time="2023-10-02T19:12:15.995121246Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:15.996750 env[1105]: time="2023-10-02T19:12:15.996722541Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:15.998126 env[1105]: time="2023-10-02T19:12:15.998098744Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:16.097218 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:12:16.097342 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib835728b455: link becomes ready Oct 2 19:12:16.106021 systemd-networkd[1004]: calib835728b455: Link UP Oct 2 19:12:16.106033 systemd-networkd[1004]: calib835728b455: Gained carrier Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.032 [INFO][3531] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--5dd5756b68--gptkl-eth0 coredns-5dd5756b68- kube-system 19055d5c-0e0a-48aa-b10b-d45f21731b0f 841 0 2023-10-02 19:11:31 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-5dd5756b68-gptkl eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calib835728b455 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" Namespace="kube-system" Pod="coredns-5dd5756b68-gptkl" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--gptkl-" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.033 [INFO][3531] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" Namespace="kube-system" Pod="coredns-5dd5756b68-gptkl" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.057 [INFO][3545] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" HandleID="k8s-pod-network.0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" Workload="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.067 [INFO][3545] ipam_plugin.go 269: Auto assigning IP ContainerID="0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" HandleID="k8s-pod-network.0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" Workload="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003f0530), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-5dd5756b68-gptkl", "timestamp":"2023-10-02 19:12:16.05775148 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:12:16.117675 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:16.117675 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.067 [INFO][3545] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.069 [INFO][3545] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" host="localhost" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.073 [INFO][3545] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.077 [INFO][3545] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.078 [INFO][3545] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.082 [INFO][3545] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.082 [INFO][3545] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" host="localhost" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.084 [INFO][3545] ipam.go 1682: Creating new handle: k8s-pod-network.0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181 Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.088 [INFO][3545] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" host="localhost" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.092 [INFO][3545] ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" host="localhost" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.092 [INFO][3545] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" host="localhost" Oct 2 19:12:16.117675 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:16.117675 env[1105]: 2023-10-02 19:12:16.092 [INFO][3545] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" HandleID="k8s-pod-network.0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" Workload="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.118392 env[1105]: 2023-10-02 19:12:16.094 [INFO][3531] k8s.go 383: Populated endpoint ContainerID="0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" Namespace="kube-system" Pod="coredns-5dd5756b68-gptkl" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--gptkl-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"19055d5c-0e0a-48aa-b10b-d45f21731b0f", ResourceVersion:"841", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-5dd5756b68-gptkl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib835728b455", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:16.118392 env[1105]: 2023-10-02 19:12:16.094 [INFO][3531] k8s.go 384: Calico CNI using IPs: [192.168.88.129/32] ContainerID="0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" Namespace="kube-system" Pod="coredns-5dd5756b68-gptkl" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.118392 env[1105]: 2023-10-02 19:12:16.094 [INFO][3531] dataplane_linux.go 68: Setting the host side veth name to calib835728b455 ContainerID="0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" Namespace="kube-system" Pod="coredns-5dd5756b68-gptkl" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.118392 env[1105]: 2023-10-02 19:12:16.097 [INFO][3531] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" Namespace="kube-system" Pod="coredns-5dd5756b68-gptkl" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.118392 env[1105]: 2023-10-02 19:12:16.105 [INFO][3531] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" Namespace="kube-system" Pod="coredns-5dd5756b68-gptkl" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--gptkl-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"19055d5c-0e0a-48aa-b10b-d45f21731b0f", ResourceVersion:"841", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181", Pod:"coredns-5dd5756b68-gptkl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib835728b455", MAC:"d2:4f:f3:25:04:f6", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:16.118392 env[1105]: 2023-10-02 19:12:16.113 [INFO][3531] k8s.go 489: Wrote updated endpoint to datastore ContainerID="0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181" Namespace="kube-system" Pod="coredns-5dd5756b68-gptkl" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.129000 audit[3573]: NETFILTER_CFG table=filter:103 family=2 entries=36 op=nft_register_chain pid=3573 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:12:16.131195 env[1105]: time="2023-10-02T19:12:16.130812461Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:12:16.131195 env[1105]: time="2023-10-02T19:12:16.130863857Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:12:16.131195 env[1105]: time="2023-10-02T19:12:16.130902910Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:12:16.131195 env[1105]: time="2023-10-02T19:12:16.131109708Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181 pid=3577 runtime=io.containerd.runc.v2 Oct 2 19:12:16.129000 audit[3573]: SYSCALL arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7ffe2144cfc0 a2=0 a3=7ffe2144cfac items=0 ppid=3243 pid=3573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.129000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:12:16.146127 systemd[1]: Started cri-containerd-0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181.scope. Oct 2 19:12:16.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.154000 audit: BPF prog-id=152 op=LOAD Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3577 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065643362613836363361303664636135616338663161313933323336 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=3577 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065643362613836363361303664636135616338663161313933323336 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit: BPF prog-id=153 op=LOAD Oct 2 19:12:16.155000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00028b130 items=0 ppid=3577 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065643362613836363361303664636135616338663161313933323336 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit: BPF prog-id=154 op=LOAD Oct 2 19:12:16.155000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00028b178 items=0 ppid=3577 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065643362613836363361303664636135616338663161313933323336 Oct 2 19:12:16.155000 audit: BPF prog-id=154 op=UNLOAD Oct 2 19:12:16.155000 audit: BPF prog-id=153 op=UNLOAD Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.155000 audit: BPF prog-id=155 op=LOAD Oct 2 19:12:16.155000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00028b588 items=0 ppid=3577 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065643362613836363361303664636135616338663161313933323336 Oct 2 19:12:16.157484 systemd-resolved[1051]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:12:16.162616 env[1105]: time="2023-10-02T19:12:16.162581379Z" level=info msg="StopPodSandbox for \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\"" Oct 2 19:12:16.163499 env[1105]: time="2023-10-02T19:12:16.162640610Z" level=info msg="StopPodSandbox for \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\"" Oct 2 19:12:16.185420 env[1105]: time="2023-10-02T19:12:16.185368443Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-gptkl,Uid:19055d5c-0e0a-48aa-b10b-d45f21731b0f,Namespace:kube-system,Attempt:1,} returns sandbox id \"0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181\"" Oct 2 19:12:16.186050 kubelet[1982]: E1002 19:12:16.186032 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:16.187662 env[1105]: time="2023-10-02T19:12:16.186768560Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:12:16.240912 env[1105]: 2023-10-02 19:12:16.213 [INFO][3647] k8s.go 576: Cleaning up netns ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:16.240912 env[1105]: 2023-10-02 19:12:16.214 [INFO][3647] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" iface="eth0" netns="/var/run/netns/cni-b396b88e-8d69-e942-e80f-6dd5a5b1932c" Oct 2 19:12:16.240912 env[1105]: 2023-10-02 19:12:16.214 [INFO][3647] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" iface="eth0" netns="/var/run/netns/cni-b396b88e-8d69-e942-e80f-6dd5a5b1932c" Oct 2 19:12:16.240912 env[1105]: 2023-10-02 19:12:16.214 [INFO][3647] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" iface="eth0" netns="/var/run/netns/cni-b396b88e-8d69-e942-e80f-6dd5a5b1932c" Oct 2 19:12:16.240912 env[1105]: 2023-10-02 19:12:16.214 [INFO][3647] k8s.go 583: Releasing IP address(es) ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:16.240912 env[1105]: 2023-10-02 19:12:16.214 [INFO][3647] utils.go 196: Calico CNI releasing IP address ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:16.240912 env[1105]: 2023-10-02 19:12:16.231 [INFO][3663] ipam_plugin.go 416: Releasing address using handleID ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" HandleID="k8s-pod-network.d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Workload="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.240912 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:16.240912 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:16.240912 env[1105]: 2023-10-02 19:12:16.237 [WARNING][3663] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" HandleID="k8s-pod-network.d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Workload="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.240912 env[1105]: 2023-10-02 19:12:16.237 [INFO][3663] ipam_plugin.go 444: Releasing address using workloadID ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" HandleID="k8s-pod-network.d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Workload="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.240912 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:16.240912 env[1105]: 2023-10-02 19:12:16.239 [INFO][3647] k8s.go 589: Teardown processing complete. ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:16.240912 env[1105]: time="2023-10-02T19:12:16.240207416Z" level=info msg="TearDown network for sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\" successfully" Oct 2 19:12:16.240912 env[1105]: time="2023-10-02T19:12:16.240242692Z" level=info msg="StopPodSandbox for \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\" returns successfully" Oct 2 19:12:16.240912 env[1105]: time="2023-10-02T19:12:16.240865781Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-n92cw,Uid:2abd516e-6d98-4ceb-865f-dc4a20fb9578,Namespace:calico-system,Attempt:1,}" Oct 2 19:12:16.248008 env[1105]: 2023-10-02 19:12:16.211 [INFO][3637] k8s.go 576: Cleaning up netns ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:16.248008 env[1105]: 2023-10-02 19:12:16.211 [INFO][3637] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" iface="eth0" netns="/var/run/netns/cni-5260d618-aa1c-2945-d80b-be7acc2d8edd" Oct 2 19:12:16.248008 env[1105]: 2023-10-02 19:12:16.212 [INFO][3637] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" iface="eth0" netns="/var/run/netns/cni-5260d618-aa1c-2945-d80b-be7acc2d8edd" Oct 2 19:12:16.248008 env[1105]: 2023-10-02 19:12:16.212 [INFO][3637] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" iface="eth0" netns="/var/run/netns/cni-5260d618-aa1c-2945-d80b-be7acc2d8edd" Oct 2 19:12:16.248008 env[1105]: 2023-10-02 19:12:16.212 [INFO][3637] k8s.go 583: Releasing IP address(es) ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:16.248008 env[1105]: 2023-10-02 19:12:16.213 [INFO][3637] utils.go 196: Calico CNI releasing IP address ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:16.248008 env[1105]: 2023-10-02 19:12:16.235 [INFO][3662] ipam_plugin.go 416: Releasing address using handleID ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" HandleID="k8s-pod-network.45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Workload="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:16.248008 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:16.248008 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:16.248008 env[1105]: 2023-10-02 19:12:16.244 [WARNING][3662] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" HandleID="k8s-pod-network.45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Workload="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:16.248008 env[1105]: 2023-10-02 19:12:16.244 [INFO][3662] ipam_plugin.go 444: Releasing address using workloadID ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" HandleID="k8s-pod-network.45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Workload="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:16.248008 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:16.248008 env[1105]: 2023-10-02 19:12:16.246 [INFO][3637] k8s.go 589: Teardown processing complete. ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:16.248392 env[1105]: time="2023-10-02T19:12:16.248101590Z" level=info msg="TearDown network for sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\" successfully" Oct 2 19:12:16.248392 env[1105]: time="2023-10-02T19:12:16.248128942Z" level=info msg="StopPodSandbox for \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\" returns successfully" Oct 2 19:12:16.250777 env[1105]: time="2023-10-02T19:12:16.250725425Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-74b9887bb6-nj7g2,Uid:ed9546b3-459e-4894-8abb-08ca86f0fc00,Namespace:calico-system,Attempt:1,}" Oct 2 19:12:16.341909 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6504bd56263: link becomes ready Oct 2 19:12:16.348467 systemd-networkd[1004]: cali6504bd56263: Link UP Oct 2 19:12:16.348474 systemd-networkd[1004]: cali6504bd56263: Gained carrier Oct 2 19:12:16.358655 systemd[1]: run-containerd-runc-k8s.io-0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181-runc.HFBzKt.mount: Deactivated successfully. Oct 2 19:12:16.358754 systemd[1]: run-netns-cni\x2db396b88e\x2d8d69\x2de942\x2de80f\x2d6dd5a5b1932c.mount: Deactivated successfully. Oct 2 19:12:16.358827 systemd[1]: run-netns-cni\x2d5260d618\x2daa1c\x2d2945\x2dd80b\x2dbe7acc2d8edd.mount: Deactivated successfully. Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.282 [INFO][3677] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--n92cw-eth0 csi-node-driver- calico-system 2abd516e-6d98-4ceb-865f-dc4a20fb9578 859 0 2023-10-02 19:11:49 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6b49688c47 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s localhost csi-node-driver-n92cw eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali6504bd56263 [] []}} ContainerID="75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" Namespace="calico-system" Pod="csi-node-driver-n92cw" WorkloadEndpoint="localhost-k8s-csi--node--driver--n92cw-" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.282 [INFO][3677] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" Namespace="calico-system" Pod="csi-node-driver-n92cw" WorkloadEndpoint="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.308 [INFO][3703] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" HandleID="k8s-pod-network.75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" Workload="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.317 [INFO][3703] ipam_plugin.go 269: Auto assigning IP ContainerID="75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" HandleID="k8s-pod-network.75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" Workload="localhost-k8s-csi--node--driver--n92cw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0004b1680), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-n92cw", "timestamp":"2023-10-02 19:12:16.308371265 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:12:16.365836 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:16.365836 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.317 [INFO][3703] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.318 [INFO][3703] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" host="localhost" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.323 [INFO][3703] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.326 [INFO][3703] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.327 [INFO][3703] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.329 [INFO][3703] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.329 [INFO][3703] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" host="localhost" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.330 [INFO][3703] ipam.go 1682: Creating new handle: k8s-pod-network.75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.333 [INFO][3703] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" host="localhost" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.337 [INFO][3703] ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" host="localhost" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.337 [INFO][3703] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" host="localhost" Oct 2 19:12:16.365836 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:16.365836 env[1105]: 2023-10-02 19:12:16.337 [INFO][3703] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" HandleID="k8s-pod-network.75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" Workload="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.366511 env[1105]: 2023-10-02 19:12:16.339 [INFO][3677] k8s.go 383: Populated endpoint ContainerID="75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" Namespace="calico-system" Pod="csi-node-driver-n92cw" WorkloadEndpoint="localhost-k8s-csi--node--driver--n92cw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--n92cw-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2abd516e-6d98-4ceb-865f-dc4a20fb9578", ResourceVersion:"859", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6b49688c47", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-n92cw", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali6504bd56263", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:16.366511 env[1105]: 2023-10-02 19:12:16.339 [INFO][3677] k8s.go 384: Calico CNI using IPs: [192.168.88.130/32] ContainerID="75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" Namespace="calico-system" Pod="csi-node-driver-n92cw" WorkloadEndpoint="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.366511 env[1105]: 2023-10-02 19:12:16.339 [INFO][3677] dataplane_linux.go 68: Setting the host side veth name to cali6504bd56263 ContainerID="75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" Namespace="calico-system" Pod="csi-node-driver-n92cw" WorkloadEndpoint="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.366511 env[1105]: 2023-10-02 19:12:16.341 [INFO][3677] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" Namespace="calico-system" Pod="csi-node-driver-n92cw" WorkloadEndpoint="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.366511 env[1105]: 2023-10-02 19:12:16.349 [INFO][3677] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" Namespace="calico-system" Pod="csi-node-driver-n92cw" WorkloadEndpoint="localhost-k8s-csi--node--driver--n92cw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--n92cw-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2abd516e-6d98-4ceb-865f-dc4a20fb9578", ResourceVersion:"859", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6b49688c47", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca", Pod:"csi-node-driver-n92cw", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali6504bd56263", MAC:"aa:25:76:92:4c:5d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:16.366511 env[1105]: 2023-10-02 19:12:16.360 [INFO][3677] k8s.go 489: Wrote updated endpoint to datastore ContainerID="75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca" Namespace="calico-system" Pod="csi-node-driver-n92cw" WorkloadEndpoint="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.376000 audit[3737]: NETFILTER_CFG table=filter:104 family=2 entries=40 op=nft_register_chain pid=3737 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:12:16.376000 audit[3737]: SYSCALL arch=c000003e syscall=46 success=yes exit=21096 a0=3 a1=7ffeec28c7d0 a2=0 a3=7ffeec28c7bc items=0 ppid=3243 pid=3737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.376000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:12:16.380968 env[1105]: time="2023-10-02T19:12:16.380829464Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:12:16.380968 env[1105]: time="2023-10-02T19:12:16.380862425Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:12:16.380968 env[1105]: time="2023-10-02T19:12:16.380897802Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:12:16.381310 env[1105]: time="2023-10-02T19:12:16.381255883Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca pid=3744 runtime=io.containerd.runc.v2 Oct 2 19:12:16.385017 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6928391fd5e: link becomes ready Oct 2 19:12:16.393866 systemd-networkd[1004]: cali6928391fd5e: Link UP Oct 2 19:12:16.393884 systemd-networkd[1004]: cali6928391fd5e: Gained carrier Oct 2 19:12:16.396553 systemd[1]: run-containerd-runc-k8s.io-75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca-runc.OedLvn.mount: Deactivated successfully. Oct 2 19:12:16.397807 systemd[1]: Started cri-containerd-75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca.scope. Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.295 [INFO][3688] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0 calico-kube-controllers-74b9887bb6- calico-system ed9546b3-459e-4894-8abb-08ca86f0fc00 858 0 2023-10-02 19:11:37 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:74b9887bb6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-74b9887bb6-nj7g2 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali6928391fd5e [] []}} ContainerID="05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-nj7g2" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.295 [INFO][3688] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-nj7g2" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.319 [INFO][3709] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" HandleID="k8s-pod-network.05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" Workload="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.331 [INFO][3709] ipam_plugin.go 269: Auto assigning IP ContainerID="05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" HandleID="k8s-pod-network.05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" Workload="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004d800), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-74b9887bb6-nj7g2", "timestamp":"2023-10-02 19:12:16.319909548 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:12:16.409678 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:16.409678 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.337 [INFO][3709] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.339 [INFO][3709] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" host="localhost" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.344 [INFO][3709] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.352 [INFO][3709] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.354 [INFO][3709] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.365 [INFO][3709] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.365 [INFO][3709] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" host="localhost" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.370 [INFO][3709] ipam.go 1682: Creating new handle: k8s-pod-network.05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220 Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.374 [INFO][3709] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" host="localhost" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.378 [INFO][3709] ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" host="localhost" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.378 [INFO][3709] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" host="localhost" Oct 2 19:12:16.409678 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:16.409678 env[1105]: 2023-10-02 19:12:16.379 [INFO][3709] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" HandleID="k8s-pod-network.05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" Workload="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:16.410255 env[1105]: 2023-10-02 19:12:16.380 [INFO][3688] k8s.go 383: Populated endpoint ContainerID="05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-nj7g2" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0", GenerateName:"calico-kube-controllers-74b9887bb6-", Namespace:"calico-system", SelfLink:"", UID:"ed9546b3-459e-4894-8abb-08ca86f0fc00", ResourceVersion:"858", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"74b9887bb6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-74b9887bb6-nj7g2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali6928391fd5e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:16.410255 env[1105]: 2023-10-02 19:12:16.380 [INFO][3688] k8s.go 384: Calico CNI using IPs: [192.168.88.131/32] ContainerID="05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-nj7g2" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:16.410255 env[1105]: 2023-10-02 19:12:16.380 [INFO][3688] dataplane_linux.go 68: Setting the host side veth name to cali6928391fd5e ContainerID="05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-nj7g2" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:16.410255 env[1105]: 2023-10-02 19:12:16.382 [INFO][3688] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-nj7g2" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:16.410255 env[1105]: 2023-10-02 19:12:16.394 [INFO][3688] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-nj7g2" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0", GenerateName:"calico-kube-controllers-74b9887bb6-", Namespace:"calico-system", SelfLink:"", UID:"ed9546b3-459e-4894-8abb-08ca86f0fc00", ResourceVersion:"858", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"74b9887bb6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220", Pod:"calico-kube-controllers-74b9887bb6-nj7g2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali6928391fd5e", MAC:"2e:d0:ed:19:b5:bf", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:16.410255 env[1105]: 2023-10-02 19:12:16.408 [INFO][3688] k8s.go 489: Wrote updated endpoint to datastore ContainerID="05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220" Namespace="calico-system" Pod="calico-kube-controllers-74b9887bb6-nj7g2" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:16.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit: BPF prog-id=156 op=LOAD Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3744 pid=3754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735613466373862366632633362656662373961616334373431373231 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3744 pid=3754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735613466373862366632633362656662373961616334373431373231 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit: BPF prog-id=157 op=LOAD Oct 2 19:12:16.413000 audit[3754]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00021c7c0 items=0 ppid=3744 pid=3754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735613466373862366632633362656662373961616334373431373231 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.413000 audit: BPF prog-id=158 op=LOAD Oct 2 19:12:16.413000 audit[3754]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00021c808 items=0 ppid=3744 pid=3754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735613466373862366632633362656662373961616334373431373231 Oct 2 19:12:16.414000 audit: BPF prog-id=158 op=UNLOAD Oct 2 19:12:16.414000 audit: BPF prog-id=157 op=UNLOAD Oct 2 19:12:16.414000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.414000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.414000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.414000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.414000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.414000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.414000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.414000 audit[3754]: AVC avc: denied { perfmon } for pid=3754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.414000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.414000 audit[3754]: AVC avc: denied { bpf } for pid=3754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.414000 audit: BPF prog-id=159 op=LOAD Oct 2 19:12:16.414000 audit[3754]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00021cc18 items=0 ppid=3744 pid=3754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735613466373862366632633362656662373961616334373431373231 Oct 2 19:12:16.416120 systemd-resolved[1051]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:12:16.420000 audit[3793]: NETFILTER_CFG table=filter:105 family=2 entries=44 op=nft_register_chain pid=3793 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:12:16.420000 audit[3793]: SYSCALL arch=c000003e syscall=46 success=yes exit=22360 a0=3 a1=7ffe2b149440 a2=0 a3=7ffe2b14942c items=0 ppid=3243 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.420000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:12:16.432456 env[1105]: time="2023-10-02T19:12:16.432391517Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:12:16.432456 env[1105]: time="2023-10-02T19:12:16.432435830Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:12:16.432456 env[1105]: time="2023-10-02T19:12:16.432445148Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:12:16.432614 env[1105]: time="2023-10-02T19:12:16.432557639Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220 pid=3804 runtime=io.containerd.runc.v2 Oct 2 19:12:16.438307 env[1105]: time="2023-10-02T19:12:16.438271322Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-n92cw,Uid:2abd516e-6d98-4ceb-865f-dc4a20fb9578,Namespace:calico-system,Attempt:1,} returns sandbox id \"75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca\"" Oct 2 19:12:16.438828 kubelet[1982]: I1002 19:12:16.438807 1982 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:12:16.439068 kubelet[1982]: I1002 19:12:16.438839 1982 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:12:16.440673 env[1105]: time="2023-10-02T19:12:16.440644836Z" level=info msg="StopPodSandbox for \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\"" Oct 2 19:12:16.443514 systemd[1]: Started cri-containerd-05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220.scope. Oct 2 19:12:16.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit: BPF prog-id=160 op=LOAD Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3804 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035656638646433393665653530393361666664613034326137373039 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3804 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035656638646433393665653530393361666664613034326137373039 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit: BPF prog-id=161 op=LOAD Oct 2 19:12:16.454000 audit[3815]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000096510 items=0 ppid=3804 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035656638646433393665653530393361666664613034326137373039 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.454000 audit: BPF prog-id=162 op=LOAD Oct 2 19:12:16.454000 audit[3815]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000096558 items=0 ppid=3804 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035656638646433393665653530393361666664613034326137373039 Oct 2 19:12:16.455000 audit: BPF prog-id=162 op=UNLOAD Oct 2 19:12:16.455000 audit: BPF prog-id=161 op=UNLOAD Oct 2 19:12:16.455000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.455000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.455000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.455000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.455000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.455000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.455000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.455000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.455000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.455000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.455000 audit: BPF prog-id=163 op=LOAD Oct 2 19:12:16.455000 audit[3815]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000096968 items=0 ppid=3804 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035656638646433393665653530393361666664613034326137373039 Oct 2 19:12:16.456807 systemd-resolved[1051]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:12:16.477910 env[1105]: time="2023-10-02T19:12:16.477860136Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-74b9887bb6-nj7g2,Uid:ed9546b3-459e-4894-8abb-08ca86f0fc00,Namespace:calico-system,Attempt:1,} returns sandbox id \"05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220\"" Oct 2 19:12:16.513074 env[1105]: 2023-10-02 19:12:16.484 [WARNING][3848] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--n92cw-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2abd516e-6d98-4ceb-865f-dc4a20fb9578", ResourceVersion:"862", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6b49688c47", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca", Pod:"csi-node-driver-n92cw", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali6504bd56263", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:16.513074 env[1105]: 2023-10-02 19:12:16.485 [INFO][3848] k8s.go 576: Cleaning up netns ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:16.513074 env[1105]: 2023-10-02 19:12:16.485 [INFO][3848] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" iface="eth0" netns="" Oct 2 19:12:16.513074 env[1105]: 2023-10-02 19:12:16.485 [INFO][3848] k8s.go 583: Releasing IP address(es) ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:16.513074 env[1105]: 2023-10-02 19:12:16.485 [INFO][3848] utils.go 196: Calico CNI releasing IP address ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:16.513074 env[1105]: 2023-10-02 19:12:16.503 [INFO][3863] ipam_plugin.go 416: Releasing address using handleID ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" HandleID="k8s-pod-network.d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Workload="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.513074 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:16.513074 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:16.513074 env[1105]: 2023-10-02 19:12:16.509 [WARNING][3863] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" HandleID="k8s-pod-network.d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Workload="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.513074 env[1105]: 2023-10-02 19:12:16.509 [INFO][3863] ipam_plugin.go 444: Releasing address using workloadID ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" HandleID="k8s-pod-network.d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Workload="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.513074 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:16.513074 env[1105]: 2023-10-02 19:12:16.511 [INFO][3848] k8s.go 589: Teardown processing complete. ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:16.513074 env[1105]: time="2023-10-02T19:12:16.513049694Z" level=info msg="TearDown network for sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\" successfully" Oct 2 19:12:16.513847 env[1105]: time="2023-10-02T19:12:16.513079069Z" level=info msg="StopPodSandbox for \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\" returns successfully" Oct 2 19:12:16.514181 env[1105]: time="2023-10-02T19:12:16.514151451Z" level=info msg="RemovePodSandbox for \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\"" Oct 2 19:12:16.514313 env[1105]: time="2023-10-02T19:12:16.514179134Z" level=info msg="Forcibly stopping sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\"" Oct 2 19:12:16.576258 env[1105]: 2023-10-02 19:12:16.544 [WARNING][3885] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--n92cw-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2abd516e-6d98-4ceb-865f-dc4a20fb9578", ResourceVersion:"862", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6b49688c47", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"75a4f78b6f2c3befb79aac47417219648445e7ae48fc979ea2e3f40a8a92c4ca", Pod:"csi-node-driver-n92cw", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali6504bd56263", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:16.576258 env[1105]: 2023-10-02 19:12:16.547 [INFO][3885] k8s.go 576: Cleaning up netns ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:16.576258 env[1105]: 2023-10-02 19:12:16.547 [INFO][3885] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" iface="eth0" netns="" Oct 2 19:12:16.576258 env[1105]: 2023-10-02 19:12:16.547 [INFO][3885] k8s.go 583: Releasing IP address(es) ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:16.576258 env[1105]: 2023-10-02 19:12:16.547 [INFO][3885] utils.go 196: Calico CNI releasing IP address ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:16.576258 env[1105]: 2023-10-02 19:12:16.566 [INFO][3892] ipam_plugin.go 416: Releasing address using handleID ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" HandleID="k8s-pod-network.d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Workload="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.576258 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:16.576258 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:16.576258 env[1105]: 2023-10-02 19:12:16.572 [WARNING][3892] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" HandleID="k8s-pod-network.d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Workload="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.576258 env[1105]: 2023-10-02 19:12:16.572 [INFO][3892] ipam_plugin.go 444: Releasing address using workloadID ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" HandleID="k8s-pod-network.d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Workload="localhost-k8s-csi--node--driver--n92cw-eth0" Oct 2 19:12:16.576258 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:16.576258 env[1105]: 2023-10-02 19:12:16.575 [INFO][3885] k8s.go 589: Teardown processing complete. ContainerID="d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347" Oct 2 19:12:16.576680 env[1105]: time="2023-10-02T19:12:16.576282399Z" level=info msg="TearDown network for sandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\" successfully" Oct 2 19:12:16.579422 env[1105]: time="2023-10-02T19:12:16.579349064Z" level=info msg="RemovePodSandbox \"d6e168f0182c4156379bc521800ea79173b3b79cf67aa639cbe9867ddef56347\" returns successfully" Oct 2 19:12:16.579927 env[1105]: time="2023-10-02T19:12:16.579903205Z" level=info msg="StopPodSandbox for \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\"" Oct 2 19:12:16.637596 env[1105]: 2023-10-02 19:12:16.611 [WARNING][3916] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--gptkl-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"19055d5c-0e0a-48aa-b10b-d45f21731b0f", ResourceVersion:"853", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181", Pod:"coredns-5dd5756b68-gptkl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib835728b455", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:16.637596 env[1105]: 2023-10-02 19:12:16.611 [INFO][3916] k8s.go 576: Cleaning up netns ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:16.637596 env[1105]: 2023-10-02 19:12:16.611 [INFO][3916] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" iface="eth0" netns="" Oct 2 19:12:16.637596 env[1105]: 2023-10-02 19:12:16.611 [INFO][3916] k8s.go 583: Releasing IP address(es) ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:16.637596 env[1105]: 2023-10-02 19:12:16.611 [INFO][3916] utils.go 196: Calico CNI releasing IP address ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:16.637596 env[1105]: 2023-10-02 19:12:16.628 [INFO][3923] ipam_plugin.go 416: Releasing address using handleID ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" HandleID="k8s-pod-network.c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Workload="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.637596 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:16.637596 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:16.637596 env[1105]: 2023-10-02 19:12:16.633 [WARNING][3923] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" HandleID="k8s-pod-network.c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Workload="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.637596 env[1105]: 2023-10-02 19:12:16.633 [INFO][3923] ipam_plugin.go 444: Releasing address using workloadID ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" HandleID="k8s-pod-network.c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Workload="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.637596 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:16.637596 env[1105]: 2023-10-02 19:12:16.636 [INFO][3916] k8s.go 589: Teardown processing complete. ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:16.638031 env[1105]: time="2023-10-02T19:12:16.637616803Z" level=info msg="TearDown network for sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\" successfully" Oct 2 19:12:16.638031 env[1105]: time="2023-10-02T19:12:16.637648262Z" level=info msg="StopPodSandbox for \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\" returns successfully" Oct 2 19:12:16.638120 env[1105]: time="2023-10-02T19:12:16.638079080Z" level=info msg="RemovePodSandbox for \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\"" Oct 2 19:12:16.638176 env[1105]: time="2023-10-02T19:12:16.638119135Z" level=info msg="Forcibly stopping sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\"" Oct 2 19:12:16.693192 env[1105]: 2023-10-02 19:12:16.666 [WARNING][3945] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--gptkl-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"19055d5c-0e0a-48aa-b10b-d45f21731b0f", ResourceVersion:"853", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181", Pod:"coredns-5dd5756b68-gptkl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib835728b455", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:16.693192 env[1105]: 2023-10-02 19:12:16.666 [INFO][3945] k8s.go 576: Cleaning up netns ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:16.693192 env[1105]: 2023-10-02 19:12:16.666 [INFO][3945] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" iface="eth0" netns="" Oct 2 19:12:16.693192 env[1105]: 2023-10-02 19:12:16.666 [INFO][3945] k8s.go 583: Releasing IP address(es) ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:16.693192 env[1105]: 2023-10-02 19:12:16.666 [INFO][3945] utils.go 196: Calico CNI releasing IP address ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:16.693192 env[1105]: 2023-10-02 19:12:16.682 [INFO][3952] ipam_plugin.go 416: Releasing address using handleID ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" HandleID="k8s-pod-network.c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Workload="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.693192 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:16.693192 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:16.693192 env[1105]: 2023-10-02 19:12:16.689 [WARNING][3952] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" HandleID="k8s-pod-network.c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Workload="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.693192 env[1105]: 2023-10-02 19:12:16.689 [INFO][3952] ipam_plugin.go 444: Releasing address using workloadID ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" HandleID="k8s-pod-network.c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Workload="localhost-k8s-coredns--5dd5756b68--gptkl-eth0" Oct 2 19:12:16.693192 env[1105]: time="2023-10-02T19:12:16Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:16.693192 env[1105]: 2023-10-02 19:12:16.691 [INFO][3945] k8s.go 589: Teardown processing complete. ContainerID="c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1" Oct 2 19:12:16.693654 env[1105]: time="2023-10-02T19:12:16.693628076Z" level=info msg="TearDown network for sandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\" successfully" Oct 2 19:12:16.696762 env[1105]: time="2023-10-02T19:12:16.696735668Z" level=info msg="RemovePodSandbox \"c2b383966c9a2b4f27ee063ab77c23cd8eb3aafb0f0c18a5df4c868232ace1d1\" returns successfully" Oct 2 19:12:16.697189 kubelet[1982]: I1002 19:12:16.697159 1982 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:12:16.711275 kubelet[1982]: I1002 19:12:16.711246 1982 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:12:16.711399 kubelet[1982]: I1002 19:12:16.711385 1982 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["kube-system/coredns-5dd5756b68-zpf5d","calico-system/calico-kube-controllers-74b9887bb6-nj7g2","kube-system/coredns-5dd5756b68-gptkl","calico-system/csi-node-driver-n92cw","tigera-operator/tigera-operator-8547bd6cc6-vqnqg","calico-system/calico-typha-96fd9cb4d-wlt5l","calico-system/calico-node-85xhn","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-8n75f","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:12:16.711477 kubelet[1982]: E1002 19:12:16.711417 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5dd5756b68-zpf5d" Oct 2 19:12:16.711477 kubelet[1982]: E1002 19:12:16.711424 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-74b9887bb6-nj7g2" Oct 2 19:12:16.711477 kubelet[1982]: E1002 19:12:16.711432 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5dd5756b68-gptkl" Oct 2 19:12:16.711477 kubelet[1982]: E1002 19:12:16.711438 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-n92cw" Oct 2 19:12:16.711916 env[1105]: time="2023-10-02T19:12:16.711890278Z" level=info msg="StopContainer for \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\" with timeout 30 (s)" Oct 2 19:12:16.712173 env[1105]: time="2023-10-02T19:12:16.712140407Z" level=info msg="Stop container \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\" with signal terminated" Oct 2 19:12:16.720725 systemd[1]: cri-containerd-58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c.scope: Deactivated successfully. Oct 2 19:12:16.720000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:12:16.721050 systemd[1]: cri-containerd-58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c.scope: Consumed 1.353s CPU time. Oct 2 19:12:16.725000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:12:16.756360 env[1105]: time="2023-10-02T19:12:16.756318434Z" level=info msg="shim disconnected" id=58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c Oct 2 19:12:16.756360 env[1105]: time="2023-10-02T19:12:16.756358369Z" level=warning msg="cleaning up after shim disconnected" id=58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c namespace=k8s.io Oct 2 19:12:16.756360 env[1105]: time="2023-10-02T19:12:16.756367546Z" level=info msg="cleaning up dead shim" Oct 2 19:12:16.766655 env[1105]: time="2023-10-02T19:12:16.766446440Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:12:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3977 runtime=io.containerd.runc.v2\n" Oct 2 19:12:16.770008 env[1105]: time="2023-10-02T19:12:16.769972978Z" level=info msg="StopContainer for \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\" returns successfully" Oct 2 19:12:16.770659 env[1105]: time="2023-10-02T19:12:16.770633458Z" level=info msg="StopPodSandbox for \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\"" Oct 2 19:12:16.770720 env[1105]: time="2023-10-02T19:12:16.770696095Z" level=info msg="Container to stop \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:12:16.776844 systemd[1]: cri-containerd-a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0.scope: Deactivated successfully. Oct 2 19:12:16.776000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:12:16.779000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:12:16.812061 env[1105]: time="2023-10-02T19:12:16.811984590Z" level=info msg="shim disconnected" id=a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0 Oct 2 19:12:16.813044 env[1105]: time="2023-10-02T19:12:16.813008862Z" level=warning msg="cleaning up after shim disconnected" id=a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0 namespace=k8s.io Oct 2 19:12:16.813044 env[1105]: time="2023-10-02T19:12:16.813030793Z" level=info msg="cleaning up dead shim" Oct 2 19:12:16.821161 env[1105]: time="2023-10-02T19:12:16.821098413Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:12:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4006 runtime=io.containerd.runc.v2\n" Oct 2 19:12:16.821751 env[1105]: time="2023-10-02T19:12:16.821718256Z" level=info msg="TearDown network for sandbox \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\" successfully" Oct 2 19:12:16.821825 env[1105]: time="2023-10-02T19:12:16.821750537Z" level=info msg="StopPodSandbox for \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\" returns successfully" Oct 2 19:12:16.831890 kubelet[1982]: I1002 19:12:16.831841 1982 eviction_manager.go:592] "Eviction manager: pod is evicted successfully" pod="tigera-operator/tigera-operator-8547bd6cc6-vqnqg" Oct 2 19:12:16.831890 kubelet[1982]: I1002 19:12:16.831866 1982 eviction_manager.go:201] "Eviction manager: pods evicted, waiting for pod to be cleaned up" pods=["tigera-operator/tigera-operator-8547bd6cc6-vqnqg"] Oct 2 19:12:16.933088 kubelet[1982]: I1002 19:12:16.933049 1982 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-blz26\" (UniqueName: \"kubernetes.io/projected/c5ad78e9-3b82-4eb8-972e-3447fb65aac2-kube-api-access-blz26\") pod \"c5ad78e9-3b82-4eb8-972e-3447fb65aac2\" (UID: \"c5ad78e9-3b82-4eb8-972e-3447fb65aac2\") " Oct 2 19:12:16.933088 kubelet[1982]: I1002 19:12:16.933094 1982 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/c5ad78e9-3b82-4eb8-972e-3447fb65aac2-var-lib-calico\") pod \"c5ad78e9-3b82-4eb8-972e-3447fb65aac2\" (UID: \"c5ad78e9-3b82-4eb8-972e-3447fb65aac2\") " Oct 2 19:12:16.933291 kubelet[1982]: I1002 19:12:16.933163 1982 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c5ad78e9-3b82-4eb8-972e-3447fb65aac2-var-lib-calico" (OuterVolumeSpecName: "var-lib-calico") pod "c5ad78e9-3b82-4eb8-972e-3447fb65aac2" (UID: "c5ad78e9-3b82-4eb8-972e-3447fb65aac2"). InnerVolumeSpecName "var-lib-calico". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:12:16.935763 kubelet[1982]: I1002 19:12:16.935728 1982 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c5ad78e9-3b82-4eb8-972e-3447fb65aac2-kube-api-access-blz26" (OuterVolumeSpecName: "kube-api-access-blz26") pod "c5ad78e9-3b82-4eb8-972e-3447fb65aac2" (UID: "c5ad78e9-3b82-4eb8-972e-3447fb65aac2"). InnerVolumeSpecName "kube-api-access-blz26". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:12:17.034169 kubelet[1982]: I1002 19:12:17.034040 1982 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-blz26\" (UniqueName: \"kubernetes.io/projected/c5ad78e9-3b82-4eb8-972e-3447fb65aac2-kube-api-access-blz26\") on node \"localhost\" DevicePath \"\"" Oct 2 19:12:17.034169 kubelet[1982]: I1002 19:12:17.034128 1982 reconciler_common.go:300] "Volume detached for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/c5ad78e9-3b82-4eb8-972e-3447fb65aac2-var-lib-calico\") on node \"localhost\" DevicePath \"\"" Oct 2 19:12:17.268000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:17.268000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0019c28c0 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:12:17.268000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:17.271000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:17.271000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:17.271000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0019c28e0 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:12:17.271000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:17.271000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:17.271000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0019c2900 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:12:17.271000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:17.271000 audit[1869]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002a7d4c0 a2=fc6 a3=0 items=0 ppid=1716 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c709 key=(null) Oct 2 19:12:17.271000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:17.281885 kubelet[1982]: E1002 19:12:17.281849 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:17.304532 kubelet[1982]: I1002 19:12:17.304444 1982 scope.go:117] "RemoveContainer" containerID="58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c" Oct 2 19:12:17.305543 systemd[1]: Removed slice kubepods-besteffort-podc5ad78e9_3b82_4eb8_972e_3447fb65aac2.slice. Oct 2 19:12:17.305620 systemd[1]: kubepods-besteffort-podc5ad78e9_3b82_4eb8_972e_3447fb65aac2.slice: Consumed 1.380s CPU time. Oct 2 19:12:17.307565 env[1105]: time="2023-10-02T19:12:17.307510158Z" level=info msg="RemoveContainer for \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\"" Oct 2 19:12:17.311397 env[1105]: time="2023-10-02T19:12:17.311370632Z" level=info msg="RemoveContainer for \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\" returns successfully" Oct 2 19:12:17.311546 kubelet[1982]: I1002 19:12:17.311529 1982 scope.go:117] "RemoveContainer" containerID="58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c" Oct 2 19:12:17.311902 env[1105]: time="2023-10-02T19:12:17.311777485Z" level=error msg="ContainerStatus for \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\": not found" Oct 2 19:12:17.312104 kubelet[1982]: E1002 19:12:17.312083 1982 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\": not found" containerID="58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c" Oct 2 19:12:17.312155 kubelet[1982]: I1002 19:12:17.312124 1982 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c"} err="failed to get container status \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\": rpc error: code = NotFound desc = an error occurred when try to find container \"58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c\": not found" Oct 2 19:12:17.356833 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-58ba7eb2a6f22edfbcd6b0a3d4ca08daf61db921d0d33a041b9707315b98724c-rootfs.mount: Deactivated successfully. Oct 2 19:12:17.356939 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0-rootfs.mount: Deactivated successfully. Oct 2 19:12:17.356991 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0-shm.mount: Deactivated successfully. Oct 2 19:12:17.357040 systemd[1]: var-lib-kubelet-pods-c5ad78e9\x2d3b82\x2d4eb8\x2d972e\x2d3447fb65aac2-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dblz26.mount: Deactivated successfully. Oct 2 19:12:17.435885 env[1105]: time="2023-10-02T19:12:17.435809152Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:17.437654 env[1105]: time="2023-10-02T19:12:17.437624368Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:17.439191 env[1105]: time="2023-10-02T19:12:17.439148148Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:17.440325 env[1105]: time="2023-10-02T19:12:17.440295050Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:17.440770 env[1105]: time="2023-10-02T19:12:17.440738162Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:12:17.441444 env[1105]: time="2023-10-02T19:12:17.441418629Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:12:17.443336 env[1105]: time="2023-10-02T19:12:17.443309978Z" level=info msg="CreateContainer within sandbox \"0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:12:17.454718 env[1105]: time="2023-10-02T19:12:17.454640581Z" level=info msg="CreateContainer within sandbox \"0ed3ba8663a06dca5ac8f1a19323639f6ab0a5ce4ce9d634d17394d1803da181\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"4798ff64b11eb9398f7f230136f1a0f215e15a32bca29055dbab988d46988b0f\"" Oct 2 19:12:17.455225 env[1105]: time="2023-10-02T19:12:17.455140990Z" level=info msg="StartContainer for \"4798ff64b11eb9398f7f230136f1a0f215e15a32bca29055dbab988d46988b0f\"" Oct 2 19:12:17.473565 systemd[1]: Started cri-containerd-4798ff64b11eb9398f7f230136f1a0f215e15a32bca29055dbab988d46988b0f.scope. Oct 2 19:12:17.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.483000 audit: BPF prog-id=164 op=LOAD Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3577 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:17.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437393866663634623131656239333938663766323330313336663161 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3577 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:17.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437393866663634623131656239333938663766323330313336663161 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit: BPF prog-id=165 op=LOAD Oct 2 19:12:17.484000 audit[4052]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000300b80 items=0 ppid=3577 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:17.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437393866663634623131656239333938663766323330313336663161 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit: BPF prog-id=166 op=LOAD Oct 2 19:12:17.484000 audit[4052]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000300bc8 items=0 ppid=3577 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:17.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437393866663634623131656239333938663766323330313336663161 Oct 2 19:12:17.484000 audit: BPF prog-id=166 op=UNLOAD Oct 2 19:12:17.484000 audit: BPF prog-id=165 op=UNLOAD Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:17.484000 audit: BPF prog-id=167 op=LOAD Oct 2 19:12:17.484000 audit[4052]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000300fd8 items=0 ppid=3577 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:17.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437393866663634623131656239333938663766323330313336663161 Oct 2 19:12:17.500132 env[1105]: time="2023-10-02T19:12:17.500075984Z" level=info msg="StartContainer for \"4798ff64b11eb9398f7f230136f1a0f215e15a32bca29055dbab988d46988b0f\" returns successfully" Oct 2 19:12:17.612037 systemd-networkd[1004]: cali6504bd56263: Gained IPv6LL Oct 2 19:12:17.692046 env[1105]: time="2023-10-02T19:12:17.691962466Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:12:17.692920 env[1105]: time="2023-10-02T19:12:17.692887282Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:12:17.693137 kubelet[1982]: E1002 19:12:17.693109 1982 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:12:17.693482 kubelet[1982]: E1002 19:12:17.693149 1982 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:12:17.693482 kubelet[1982]: E1002 19:12:17.693336 1982 kuberuntime_manager.go:1209] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-lv6zw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-n92cw_calico-system(2abd516e-6d98-4ceb-865f-dc4a20fb9578): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:12:17.693655 env[1105]: time="2023-10-02T19:12:17.693600330Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\"" Oct 2 19:12:17.832509 kubelet[1982]: I1002 19:12:17.832470 1982 eviction_manager.go:423] "Eviction manager: pods successfully cleaned up" pods=["tigera-operator/tigera-operator-8547bd6cc6-vqnqg"] Oct 2 19:12:17.843084 kubelet[1982]: I1002 19:12:17.843053 1982 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:12:17.843084 kubelet[1982]: I1002 19:12:17.843081 1982 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:12:17.844569 env[1105]: time="2023-10-02T19:12:17.844537717Z" level=info msg="StopPodSandbox for \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\"" Oct 2 19:12:17.896445 env[1105]: 2023-10-02 19:12:17.872 [WARNING][4098] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0", GenerateName:"calico-kube-controllers-74b9887bb6-", Namespace:"calico-system", SelfLink:"", UID:"ed9546b3-459e-4894-8abb-08ca86f0fc00", ResourceVersion:"865", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"74b9887bb6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220", Pod:"calico-kube-controllers-74b9887bb6-nj7g2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali6928391fd5e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:17.896445 env[1105]: 2023-10-02 19:12:17.872 [INFO][4098] k8s.go 576: Cleaning up netns ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:17.896445 env[1105]: 2023-10-02 19:12:17.872 [INFO][4098] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" iface="eth0" netns="" Oct 2 19:12:17.896445 env[1105]: 2023-10-02 19:12:17.872 [INFO][4098] k8s.go 583: Releasing IP address(es) ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:17.896445 env[1105]: 2023-10-02 19:12:17.872 [INFO][4098] utils.go 196: Calico CNI releasing IP address ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:17.896445 env[1105]: 2023-10-02 19:12:17.887 [INFO][4106] ipam_plugin.go 416: Releasing address using handleID ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" HandleID="k8s-pod-network.45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Workload="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:17.896445 env[1105]: time="2023-10-02T19:12:17Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:17.896445 env[1105]: time="2023-10-02T19:12:17Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:17.896445 env[1105]: 2023-10-02 19:12:17.893 [WARNING][4106] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" HandleID="k8s-pod-network.45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Workload="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:17.896445 env[1105]: 2023-10-02 19:12:17.893 [INFO][4106] ipam_plugin.go 444: Releasing address using workloadID ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" HandleID="k8s-pod-network.45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Workload="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:17.896445 env[1105]: time="2023-10-02T19:12:17Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:17.896445 env[1105]: 2023-10-02 19:12:17.895 [INFO][4098] k8s.go 589: Teardown processing complete. ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:17.896445 env[1105]: time="2023-10-02T19:12:17.896416353Z" level=info msg="TearDown network for sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\" successfully" Oct 2 19:12:17.897091 env[1105]: time="2023-10-02T19:12:17.896453232Z" level=info msg="StopPodSandbox for \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\" returns successfully" Oct 2 19:12:17.897295 env[1105]: time="2023-10-02T19:12:17.897262991Z" level=info msg="RemovePodSandbox for \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\"" Oct 2 19:12:17.897347 env[1105]: time="2023-10-02T19:12:17.897292586Z" level=info msg="Forcibly stopping sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\"" Oct 2 19:12:17.931997 systemd-networkd[1004]: calib835728b455: Gained IPv6LL Oct 2 19:12:17.951485 env[1105]: 2023-10-02 19:12:17.924 [WARNING][4128] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0", GenerateName:"calico-kube-controllers-74b9887bb6-", Namespace:"calico-system", SelfLink:"", UID:"ed9546b3-459e-4894-8abb-08ca86f0fc00", ResourceVersion:"865", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"74b9887bb6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"05ef8dd396ee5093affda042a7709c305833fee1ece33cca45f2872859ec8220", Pod:"calico-kube-controllers-74b9887bb6-nj7g2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali6928391fd5e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:17.951485 env[1105]: 2023-10-02 19:12:17.924 [INFO][4128] k8s.go 576: Cleaning up netns ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:17.951485 env[1105]: 2023-10-02 19:12:17.924 [INFO][4128] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" iface="eth0" netns="" Oct 2 19:12:17.951485 env[1105]: 2023-10-02 19:12:17.924 [INFO][4128] k8s.go 583: Releasing IP address(es) ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:17.951485 env[1105]: 2023-10-02 19:12:17.924 [INFO][4128] utils.go 196: Calico CNI releasing IP address ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:17.951485 env[1105]: 2023-10-02 19:12:17.941 [INFO][4136] ipam_plugin.go 416: Releasing address using handleID ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" HandleID="k8s-pod-network.45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Workload="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:17.951485 env[1105]: time="2023-10-02T19:12:17Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:17.951485 env[1105]: time="2023-10-02T19:12:17Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:17.951485 env[1105]: 2023-10-02 19:12:17.947 [WARNING][4136] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" HandleID="k8s-pod-network.45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Workload="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:17.951485 env[1105]: 2023-10-02 19:12:17.947 [INFO][4136] ipam_plugin.go 444: Releasing address using workloadID ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" HandleID="k8s-pod-network.45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Workload="localhost-k8s-calico--kube--controllers--74b9887bb6--nj7g2-eth0" Oct 2 19:12:17.951485 env[1105]: time="2023-10-02T19:12:17Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:17.951485 env[1105]: 2023-10-02 19:12:17.950 [INFO][4128] k8s.go 589: Teardown processing complete. ContainerID="45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b" Oct 2 19:12:17.951990 env[1105]: time="2023-10-02T19:12:17.951509029Z" level=info msg="TearDown network for sandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\" successfully" Oct 2 19:12:17.954199 env[1105]: time="2023-10-02T19:12:17.954172847Z" level=info msg="RemovePodSandbox \"45afb895ea9a683ed3625f12bc1434cc31d678ae48e0a63c79aa2a4a87a2674b\" returns successfully" Oct 2 19:12:17.954593 env[1105]: time="2023-10-02T19:12:17.954574441Z" level=info msg="StopPodSandbox for \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\"" Oct 2 19:12:17.954822 env[1105]: time="2023-10-02T19:12:17.954626549Z" level=info msg="TearDown network for sandbox \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\" successfully" Oct 2 19:12:17.954822 env[1105]: time="2023-10-02T19:12:17.954816726Z" level=info msg="StopPodSandbox for \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\" returns successfully" Oct 2 19:12:17.956146 env[1105]: time="2023-10-02T19:12:17.956105685Z" level=info msg="RemovePodSandbox for \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\"" Oct 2 19:12:17.956200 env[1105]: time="2023-10-02T19:12:17.956168583Z" level=info msg="Forcibly stopping sandbox \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\"" Oct 2 19:12:17.956301 env[1105]: time="2023-10-02T19:12:17.956274011Z" level=info msg="TearDown network for sandbox \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\" successfully" Oct 2 19:12:17.959954 env[1105]: time="2023-10-02T19:12:17.959914773Z" level=info msg="RemovePodSandbox \"a398eec6142170f624c20fc4375344ccac3a7def240f9e5fb34d828be0cdfdd0\" returns successfully" Oct 2 19:12:17.960374 kubelet[1982]: I1002 19:12:17.960342 1982 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:12:17.971330 kubelet[1982]: I1002 19:12:17.971310 1982 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:12:17.971431 kubelet[1982]: I1002 19:12:17.971402 1982 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/calico-kube-controllers-74b9887bb6-nj7g2","kube-system/coredns-5dd5756b68-zpf5d","calico-system/csi-node-driver-n92cw","calico-system/calico-typha-96fd9cb4d-wlt5l","kube-system/coredns-5dd5756b68-gptkl","calico-system/calico-node-85xhn","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-8n75f","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:12:17.971431 kubelet[1982]: E1002 19:12:17.971424 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-74b9887bb6-nj7g2" Oct 2 19:12:17.971431 kubelet[1982]: E1002 19:12:17.971430 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5dd5756b68-zpf5d" Oct 2 19:12:17.971567 kubelet[1982]: E1002 19:12:17.971437 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-n92cw" Oct 2 19:12:17.971567 kubelet[1982]: E1002 19:12:17.971446 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-96fd9cb4d-wlt5l" Oct 2 19:12:17.971567 kubelet[1982]: E1002 19:12:17.971454 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5dd5756b68-gptkl" Oct 2 19:12:17.971567 kubelet[1982]: E1002 19:12:17.971462 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-85xhn" Oct 2 19:12:17.971567 kubelet[1982]: E1002 19:12:17.971469 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:17.971567 kubelet[1982]: E1002 19:12:17.971477 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-8n75f" Oct 2 19:12:17.971567 kubelet[1982]: E1002 19:12:17.971484 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:17.971567 kubelet[1982]: E1002 19:12:17.971493 1982 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:12:17.971567 kubelet[1982]: I1002 19:12:17.971502 1982 eviction_manager.go:403] "Eviction manager: unable to evict any pods from the node" Oct 2 19:12:18.160516 env[1105]: time="2023-10-02T19:12:18.159844259Z" level=info msg="StopPodSandbox for \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\"" Oct 2 19:12:18.188130 systemd-networkd[1004]: cali6928391fd5e: Gained IPv6LL Oct 2 19:12:18.234569 env[1105]: 2023-10-02 19:12:18.207 [INFO][4159] k8s.go 576: Cleaning up netns ContainerID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" Oct 2 19:12:18.234569 env[1105]: 2023-10-02 19:12:18.207 [INFO][4159] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" iface="eth0" netns="/var/run/netns/cni-2480571e-0b22-7ceb-9a1f-bb6ce1beb63b" Oct 2 19:12:18.234569 env[1105]: 2023-10-02 19:12:18.207 [INFO][4159] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" iface="eth0" netns="/var/run/netns/cni-2480571e-0b22-7ceb-9a1f-bb6ce1beb63b" Oct 2 19:12:18.234569 env[1105]: 2023-10-02 19:12:18.208 [INFO][4159] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" iface="eth0" netns="/var/run/netns/cni-2480571e-0b22-7ceb-9a1f-bb6ce1beb63b" Oct 2 19:12:18.234569 env[1105]: 2023-10-02 19:12:18.208 [INFO][4159] k8s.go 583: Releasing IP address(es) ContainerID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" Oct 2 19:12:18.234569 env[1105]: 2023-10-02 19:12:18.208 [INFO][4159] utils.go 196: Calico CNI releasing IP address ContainerID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" Oct 2 19:12:18.234569 env[1105]: 2023-10-02 19:12:18.224 [INFO][4168] ipam_plugin.go 416: Releasing address using handleID ContainerID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" HandleID="k8s-pod-network.cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" Workload="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" Oct 2 19:12:18.234569 env[1105]: time="2023-10-02T19:12:18Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:18.234569 env[1105]: time="2023-10-02T19:12:18Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:18.234569 env[1105]: 2023-10-02 19:12:18.231 [WARNING][4168] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" HandleID="k8s-pod-network.cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" Workload="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" Oct 2 19:12:18.234569 env[1105]: 2023-10-02 19:12:18.231 [INFO][4168] ipam_plugin.go 444: Releasing address using workloadID ContainerID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" HandleID="k8s-pod-network.cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" Workload="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" Oct 2 19:12:18.234569 env[1105]: time="2023-10-02T19:12:18Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:18.234569 env[1105]: 2023-10-02 19:12:18.233 [INFO][4159] k8s.go 589: Teardown processing complete. ContainerID="cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e" Oct 2 19:12:18.235102 env[1105]: time="2023-10-02T19:12:18.234712853Z" level=info msg="TearDown network for sandbox \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\" successfully" Oct 2 19:12:18.235102 env[1105]: time="2023-10-02T19:12:18.234748580Z" level=info msg="StopPodSandbox for \"cc361e777154ffdbd3c7ad6c659349c2fe3248ac74b1c0ac45ad73f56529252e\" returns successfully" Oct 2 19:12:18.235158 kubelet[1982]: E1002 19:12:18.235054 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:18.235687 env[1105]: time="2023-10-02T19:12:18.235645243Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-zpf5d,Uid:a98068cd-fff0-4619-893b-592048280adf,Namespace:kube-system,Attempt:1,}" Oct 2 19:12:18.314402 kubelet[1982]: E1002 19:12:18.314369 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:18.323689 kubelet[1982]: I1002 19:12:18.323525 1982 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-gptkl" podStartSLOduration=46.068865266 podCreationTimestamp="2023-10-02 19:11:31 +0000 UTC" firstStartedPulling="2023-10-02 19:12:16.186433672 +0000 UTC m=+60.109650099" lastFinishedPulling="2023-10-02 19:12:17.441043985 +0000 UTC m=+61.364260412" observedRunningTime="2023-10-02 19:12:18.322268454 +0000 UTC m=+62.245484881" watchObservedRunningTime="2023-10-02 19:12:18.323475579 +0000 UTC m=+62.246692026" Oct 2 19:12:18.362915 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliba1430f9437: link becomes ready Oct 2 19:12:18.355000 audit[4198]: NETFILTER_CFG table=filter:106 family=2 entries=14 op=nft_register_rule pid=4198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:12:18.355000 audit[4198]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffc894f4ac0 a2=0 a3=7ffc894f4aac items=0 ppid=2181 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.355000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:18.356000 audit[4198]: NETFILTER_CFG table=nat:107 family=2 entries=14 op=nft_register_rule pid=4198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:12:18.356000 audit[4198]: SYSCALL arch=c000003e syscall=46 success=yes exit=3300 a0=3 a1=7ffc894f4ac0 a2=0 a3=31030 items=0 ppid=2181 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.356000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:18.354940 systemd-networkd[1004]: caliba1430f9437: Link UP Oct 2 19:12:18.358534 systemd[1]: run-netns-cni\x2d2480571e\x2d0b22\x2d7ceb\x2d9a1f\x2dbb6ce1beb63b.mount: Deactivated successfully. Oct 2 19:12:18.365412 systemd-networkd[1004]: caliba1430f9437: Gained carrier Oct 2 19:12:18.367000 audit[4201]: NETFILTER_CFG table=filter:108 family=2 entries=11 op=nft_register_rule pid=4201 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:12:18.367000 audit[4201]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffcdfe1cbb0 a2=0 a3=7ffcdfe1cb9c items=0 ppid=2181 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.367000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.277 [INFO][4176] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--5dd5756b68--zpf5d-eth0 coredns-5dd5756b68- kube-system a98068cd-fff0-4619-893b-592048280adf 896 0 2023-10-02 19:11:31 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-5dd5756b68-zpf5d eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] caliba1430f9437 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" Namespace="kube-system" Pod="coredns-5dd5756b68-zpf5d" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--zpf5d-" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.277 [INFO][4176] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" Namespace="kube-system" Pod="coredns-5dd5756b68-zpf5d" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.299 [INFO][4189] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" HandleID="k8s-pod-network.b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" Workload="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.309 [INFO][4189] ipam_plugin.go 269: Auto assigning IP ContainerID="b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" HandleID="k8s-pod-network.b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" Workload="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000584fd0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-5dd5756b68-zpf5d", "timestamp":"2023-10-02 19:12:18.299832011 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:12:18.369606 env[1105]: time="2023-10-02T19:12:18Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:12:18.369606 env[1105]: time="2023-10-02T19:12:18Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.309 [INFO][4189] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.311 [INFO][4189] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" host="localhost" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.316 [INFO][4189] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.326 [INFO][4189] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.328 [INFO][4189] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.334 [INFO][4189] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.334 [INFO][4189] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" host="localhost" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.337 [INFO][4189] ipam.go 1682: Creating new handle: k8s-pod-network.b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.341 [INFO][4189] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" host="localhost" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.347 [INFO][4189] ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" host="localhost" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.347 [INFO][4189] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" host="localhost" Oct 2 19:12:18.369606 env[1105]: time="2023-10-02T19:12:18Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:12:18.369606 env[1105]: 2023-10-02 19:12:18.347 [INFO][4189] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" HandleID="k8s-pod-network.b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" Workload="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" Oct 2 19:12:18.370570 env[1105]: 2023-10-02 19:12:18.349 [INFO][4176] k8s.go 383: Populated endpoint ContainerID="b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" Namespace="kube-system" Pod="coredns-5dd5756b68-zpf5d" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--zpf5d-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"a98068cd-fff0-4619-893b-592048280adf", ResourceVersion:"896", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-5dd5756b68-zpf5d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliba1430f9437", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:18.370570 env[1105]: 2023-10-02 19:12:18.349 [INFO][4176] k8s.go 384: Calico CNI using IPs: [192.168.88.132/32] ContainerID="b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" Namespace="kube-system" Pod="coredns-5dd5756b68-zpf5d" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" Oct 2 19:12:18.370570 env[1105]: 2023-10-02 19:12:18.349 [INFO][4176] dataplane_linux.go 68: Setting the host side veth name to caliba1430f9437 ContainerID="b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" Namespace="kube-system" Pod="coredns-5dd5756b68-zpf5d" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" Oct 2 19:12:18.370570 env[1105]: 2023-10-02 19:12:18.350 [INFO][4176] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" Namespace="kube-system" Pod="coredns-5dd5756b68-zpf5d" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" Oct 2 19:12:18.370570 env[1105]: 2023-10-02 19:12:18.354 [INFO][4176] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" Namespace="kube-system" Pod="coredns-5dd5756b68-zpf5d" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--zpf5d-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"a98068cd-fff0-4619-893b-592048280adf", ResourceVersion:"896", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 11, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf", Pod:"coredns-5dd5756b68-zpf5d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliba1430f9437", MAC:"4a:70:a3:5e:6e:c0", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:12:18.370570 env[1105]: 2023-10-02 19:12:18.368 [INFO][4176] k8s.go 489: Wrote updated endpoint to datastore ContainerID="b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf" Namespace="kube-system" Pod="coredns-5dd5756b68-zpf5d" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--zpf5d-eth0" Oct 2 19:12:18.369000 audit[4201]: NETFILTER_CFG table=nat:109 family=2 entries=35 op=nft_register_chain pid=4201 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:12:18.369000 audit[4201]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7ffcdfe1cbb0 a2=0 a3=7ffcdfe1cb9c items=0 ppid=2181 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.369000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:18.380177 env[1105]: time="2023-10-02T19:12:18.380115966Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:12:18.380177 env[1105]: time="2023-10-02T19:12:18.380155320Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:12:18.380337 env[1105]: time="2023-10-02T19:12:18.380168405Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:12:18.380487 env[1105]: time="2023-10-02T19:12:18.380441006Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf pid=4221 runtime=io.containerd.runc.v2 Oct 2 19:12:18.387000 audit[4233]: NETFILTER_CFG table=filter:110 family=2 entries=40 op=nft_register_chain pid=4233 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:12:18.387000 audit[4233]: SYSCALL arch=c000003e syscall=46 success=yes exit=20736 a0=3 a1=7fff4f19b570 a2=0 a3=7fff4f19b55c items=0 ppid=3243 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.387000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:12:18.395956 systemd[1]: run-containerd-runc-k8s.io-b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf-runc.gKptBc.mount: Deactivated successfully. Oct 2 19:12:18.399266 systemd[1]: Started cri-containerd-b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf.scope. Oct 2 19:12:18.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.408000 audit: BPF prog-id=168 op=LOAD Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4221 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233336262643337316565653130626638313165303064643833353839 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4221 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233336262643337316565653130626638313165303064643833353839 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit: BPF prog-id=169 op=LOAD Oct 2 19:12:18.409000 audit[4232]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000098cf0 items=0 ppid=4221 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233336262643337316565653130626638313165303064643833353839 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit: BPF prog-id=170 op=LOAD Oct 2 19:12:18.409000 audit[4232]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000098d38 items=0 ppid=4221 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233336262643337316565653130626638313165303064643833353839 Oct 2 19:12:18.409000 audit: BPF prog-id=170 op=UNLOAD Oct 2 19:12:18.409000 audit: BPF prog-id=169 op=UNLOAD Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.409000 audit: BPF prog-id=171 op=LOAD Oct 2 19:12:18.409000 audit[4232]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000099148 items=0 ppid=4221 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233336262643337316565653130626638313165303064643833353839 Oct 2 19:12:18.411356 systemd-resolved[1051]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:12:18.436268 env[1105]: time="2023-10-02T19:12:18.436221510Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-zpf5d,Uid:a98068cd-fff0-4619-893b-592048280adf,Namespace:kube-system,Attempt:1,} returns sandbox id \"b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf\"" Oct 2 19:12:18.437011 kubelet[1982]: E1002 19:12:18.436991 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:18.439258 env[1105]: time="2023-10-02T19:12:18.439229475Z" level=info msg="CreateContainer within sandbox \"b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:12:18.451273 env[1105]: time="2023-10-02T19:12:18.451225505Z" level=info msg="CreateContainer within sandbox \"b33bbd371eee10bf811e00dd83589e50d01f34d8e47a745b270799af668a0dbf\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"668416091b4ce9559785f42b9b2cc9aec228f6e220c75dc030e604daebffbf3a\"" Oct 2 19:12:18.451836 env[1105]: time="2023-10-02T19:12:18.451795866Z" level=info msg="StartContainer for \"668416091b4ce9559785f42b9b2cc9aec228f6e220c75dc030e604daebffbf3a\"" Oct 2 19:12:18.467659 systemd[1]: Started cri-containerd-668416091b4ce9559785f42b9b2cc9aec228f6e220c75dc030e604daebffbf3a.scope. Oct 2 19:12:18.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit: BPF prog-id=172 op=LOAD Oct 2 19:12:18.479000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[4264]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4221 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636383431363039316234636539353539373835663432623962326363 Oct 2 19:12:18.479000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[4264]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4221 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636383431363039316234636539353539373835663432623962326363 Oct 2 19:12:18.479000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.479000 audit: BPF prog-id=173 op=LOAD Oct 2 19:12:18.479000 audit[4264]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00031a360 items=0 ppid=4221 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636383431363039316234636539353539373835663432623962326363 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit: BPF prog-id=174 op=LOAD Oct 2 19:12:18.480000 audit[4264]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00031a3a8 items=0 ppid=4221 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636383431363039316234636539353539373835663432623962326363 Oct 2 19:12:18.480000 audit: BPF prog-id=174 op=UNLOAD Oct 2 19:12:18.480000 audit: BPF prog-id=173 op=UNLOAD Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:18.480000 audit: BPF prog-id=175 op=LOAD Oct 2 19:12:18.480000 audit[4264]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00031a7b8 items=0 ppid=4221 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:18.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636383431363039316234636539353539373835663432623962326363 Oct 2 19:12:18.494947 env[1105]: time="2023-10-02T19:12:18.494825863Z" level=info msg="StartContainer for \"668416091b4ce9559785f42b9b2cc9aec228f6e220c75dc030e604daebffbf3a\" returns successfully" Oct 2 19:12:19.318181 kubelet[1982]: E1002 19:12:19.318145 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:19.318692 kubelet[1982]: E1002 19:12:19.318326 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:19.326790 kubelet[1982]: I1002 19:12:19.326755 1982 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-zpf5d" podStartSLOduration=48.326721627 podCreationTimestamp="2023-10-02 19:11:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:12:19.326274298 +0000 UTC m=+63.249490745" watchObservedRunningTime="2023-10-02 19:12:19.326721627 +0000 UTC m=+63.249938084" Oct 2 19:12:19.412000 audit[4301]: NETFILTER_CFG table=filter:111 family=2 entries=8 op=nft_register_rule pid=4301 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:12:19.412000 audit[4301]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7fff640ed510 a2=0 a3=7fff640ed4fc items=0 ppid=2181 pid=4301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:19.412000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:19.413000 audit[4301]: NETFILTER_CFG table=nat:112 family=2 entries=44 op=nft_register_rule pid=4301 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:12:19.413000 audit[4301]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7fff640ed510 a2=0 a3=7fff640ed4fc items=0 ppid=2181 pid=4301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:19.413000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:20.319957 kubelet[1982]: E1002 19:12:20.319926 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:20.320478 kubelet[1982]: E1002 19:12:20.320000 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:20.347905 env[1105]: time="2023-10-02T19:12:20.347822321Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\": failed to extract layer sha256:a8764b36cebb956619a771757dd3130b264461dc0efcbe2de75a65840807226b: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/113/fs/usr/bin/kube-controllers: no space left on device: unknown" Oct 2 19:12:20.348308 kubelet[1982]: E1002 19:12:20.348192 1982 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\": failed to extract layer sha256:a8764b36cebb956619a771757dd3130b264461dc0efcbe2de75a65840807226b: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/113/fs/usr/bin/kube-controllers: no space left on device: unknown" image="ghcr.io/flatcar/calico/kube-controllers:v3.25.0" Oct 2 19:12:20.348308 kubelet[1982]: E1002 19:12:20.348242 1982 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\": failed to extract layer sha256:a8764b36cebb956619a771757dd3130b264461dc0efcbe2de75a65840807226b: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/113/fs/usr/bin/kube-controllers: no space left on device: unknown" image="ghcr.io/flatcar/calico/kube-controllers:v3.25.0" Oct 2 19:12:20.349815 kubelet[1982]: E1002 19:12:20.348484 1982 kuberuntime_manager.go:1209] container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,ValueFrom:nil,},EnvVar{Name:FIPS_MODE_ENABLED,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-7wv9v,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-74b9887bb6-nj7g2_calico-system(ed9546b3-459e-4894-8abb-08ca86f0fc00): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/kube-controllers:v3.25.0": failed to extract layer sha256:a8764b36cebb956619a771757dd3130b264461dc0efcbe2de75a65840807226b: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/113/fs/usr/bin/kube-controllers: no space left on device: unknown Oct 2 19:12:20.349815 kubelet[1982]: E1002 19:12:20.348620 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\\\": failed to extract layer sha256:a8764b36cebb956619a771757dd3130b264461dc0efcbe2de75a65840807226b: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/113/fs/usr/bin/kube-controllers: no space left on device: unknown\"" pod="calico-system/calico-kube-controllers-74b9887bb6-nj7g2" podUID="ed9546b3-459e-4894-8abb-08ca86f0fc00" Oct 2 19:12:20.350042 env[1105]: time="2023-10-02T19:12:20.348709373Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:12:20.364032 systemd-networkd[1004]: caliba1430f9437: Gained IPv6LL Oct 2 19:12:20.424000 audit[4311]: NETFILTER_CFG table=filter:113 family=2 entries=8 op=nft_register_rule pid=4311 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:12:20.426382 kernel: kauditd_printk_skb: 389 callbacks suppressed Oct 2 19:12:20.426563 kernel: audit: type=1325 audit(1696273940.424:1360): table=filter:113 family=2 entries=8 op=nft_register_rule pid=4311 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:12:20.424000 audit[4311]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffff8c17fa0 a2=0 a3=7ffff8c17f8c items=0 ppid=2181 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:20.432319 kernel: audit: type=1300 audit(1696273940.424:1360): arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffff8c17fa0 a2=0 a3=7ffff8c17f8c items=0 ppid=2181 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:20.432399 kernel: audit: type=1327 audit(1696273940.424:1360): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:20.424000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:20.434000 audit[4311]: NETFILTER_CFG table=nat:114 family=2 entries=56 op=nft_register_chain pid=4311 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:12:20.434000 audit[4311]: SYSCALL arch=c000003e syscall=46 success=yes exit=19452 a0=3 a1=7ffff8c17fa0 a2=0 a3=7ffff8c17f8c items=0 ppid=2181 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:20.443135 kernel: audit: type=1325 audit(1696273940.434:1361): table=nat:114 family=2 entries=56 op=nft_register_chain pid=4311 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:12:20.443189 kernel: audit: type=1300 audit(1696273940.434:1361): arch=c000003e syscall=46 success=yes exit=19452 a0=3 a1=7ffff8c17fa0 a2=0 a3=7ffff8c17f8c items=0 ppid=2181 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:20.443220 kernel: audit: type=1327 audit(1696273940.434:1361): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:20.434000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:20.635759 env[1105]: time="2023-10-02T19:12:20.635611020Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:12:20.637123 env[1105]: time="2023-10-02T19:12:20.637078201Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:12:20.637393 kubelet[1982]: E1002 19:12:20.637365 1982 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:12:20.637502 kubelet[1982]: E1002 19:12:20.637417 1982 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:12:20.637549 kubelet[1982]: E1002 19:12:20.637530 1982 kuberuntime_manager.go:1209] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-lv6zw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-n92cw_calico-system(2abd516e-6d98-4ceb-865f-dc4a20fb9578): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:12:20.637671 kubelet[1982]: E1002 19:12:20.637579 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-n92cw" podUID="2abd516e-6d98-4ceb-865f-dc4a20fb9578" Oct 2 19:12:21.321517 kubelet[1982]: E1002 19:12:21.321480 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:21.322218 kubelet[1982]: E1002 19:12:21.322201 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\\\"\"" pod="calico-system/calico-kube-controllers-74b9887bb6-nj7g2" podUID="ed9546b3-459e-4894-8abb-08ca86f0fc00" Oct 2 19:12:21.322547 kubelet[1982]: E1002 19:12:21.322511 1982 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-n92cw" podUID="2abd516e-6d98-4ceb-865f-dc4a20fb9578" Oct 2 19:12:25.621640 systemd[1]: Started sshd@13-10.0.0.69:22-10.0.0.1:38268.service. Oct 2 19:12:25.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.69:22-10.0.0.1:38268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:25.625899 kernel: audit: type=1130 audit(1696273945.620:1362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.69:22-10.0.0.1:38268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:25.656000 audit[4317]: USER_ACCT pid=4317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:25.657978 sshd[4317]: Accepted publickey for core from 10.0.0.1 port 38268 ssh2: RSA SHA256:9wRqOmzBU7I1L73Sd3XbDPVeoZziQ4I3fHnP0PJ8idM Oct 2 19:12:25.659681 sshd[4317]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:25.658000 audit[4317]: CRED_ACQ pid=4317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:25.663429 kernel: audit: type=1101 audit(1696273945.656:1363): pid=4317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:25.663480 kernel: audit: type=1103 audit(1696273945.658:1364): pid=4317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:25.663501 kernel: audit: type=1006 audit(1696273945.658:1365): pid=4317 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:12:25.663123 systemd-logind[1090]: New session 14 of user core. Oct 2 19:12:25.664226 systemd[1]: Started session-14.scope. Oct 2 19:12:25.664748 kernel: audit: type=1300 audit(1696273945.658:1365): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff229cd8d0 a2=3 a3=0 items=0 ppid=1 pid=4317 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:25.658000 audit[4317]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff229cd8d0 a2=3 a3=0 items=0 ppid=1 pid=4317 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:25.658000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:25.668217 kernel: audit: type=1327 audit(1696273945.658:1365): proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:25.668000 audit[4317]: USER_START pid=4317 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:25.671886 kernel: audit: type=1105 audit(1696273945.668:1366): pid=4317 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:25.671935 kernel: audit: type=1103 audit(1696273945.669:1367): pid=4319 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:25.669000 audit[4319]: CRED_ACQ pid=4319 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:25.773629 sshd[4317]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:25.773000 audit[4317]: USER_END pid=4317 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:25.775695 systemd[1]: sshd@13-10.0.0.69:22-10.0.0.1:38268.service: Deactivated successfully. Oct 2 19:12:25.776440 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:12:25.773000 audit[4317]: CRED_DISP pid=4317 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:25.781040 kernel: audit: type=1106 audit(1696273945.773:1368): pid=4317 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:25.781147 kernel: audit: type=1104 audit(1696273945.773:1369): pid=4317 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:25.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.69:22-10.0.0.1:38268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:25.781351 systemd-logind[1090]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:12:25.782175 systemd-logind[1090]: Removed session 14.