Oct 2 20:41:03.065669 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 20:41:03.065689 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 20:41:03.065697 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Oct 2 20:41:03.065704 kernel: printk: bootconsole [pl11] enabled Oct 2 20:41:03.065709 kernel: efi: EFI v2.70 by EDK II Oct 2 20:41:03.065714 kernel: efi: ACPI 2.0=0x3fd8d018 SMBIOS=0x3fd6a000 SMBIOS 3.0=0x3fd68000 MEMATTR=0x3ef3f098 RNG=0x3fd8d998 MEMRESERVE=0x37eb7f98 Oct 2 20:41:03.065720 kernel: random: crng init done Oct 2 20:41:03.065726 kernel: ACPI: Early table checksum verification disabled Oct 2 20:41:03.065731 kernel: ACPI: RSDP 0x000000003FD8D018 000024 (v02 VRTUAL) Oct 2 20:41:03.065737 kernel: ACPI: XSDT 0x000000003FD8DF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:41:03.065742 kernel: ACPI: FACP 0x000000003FD8DC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:41:03.065749 kernel: ACPI: DSDT 0x000000003EBD6018 01DEC0 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 20:41:03.065754 kernel: ACPI: DBG2 0x000000003FD8DB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:41:03.065759 kernel: ACPI: GTDT 0x000000003FD8DD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:41:03.065766 kernel: ACPI: OEM0 0x000000003FD8D098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:41:03.065772 kernel: ACPI: SPCR 0x000000003FD8DA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:41:03.065778 kernel: ACPI: APIC 0x000000003FD8D818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:41:03.065784 kernel: ACPI: SRAT 0x000000003FD8D198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:41:03.065790 kernel: ACPI: PPTT 0x000000003FD8D418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Oct 2 20:41:03.065796 kernel: ACPI: BGRT 0x000000003FD8DE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:41:03.065801 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Oct 2 20:41:03.065807 kernel: NUMA: Failed to initialise from firmware Oct 2 20:41:03.065813 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 20:41:03.065818 kernel: NUMA: NODE_DATA [mem 0x1bf7f3900-0x1bf7f8fff] Oct 2 20:41:03.065824 kernel: Zone ranges: Oct 2 20:41:03.065830 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Oct 2 20:41:03.065835 kernel: DMA32 empty Oct 2 20:41:03.065842 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 20:41:03.065847 kernel: Movable zone start for each node Oct 2 20:41:03.065853 kernel: Early memory node ranges Oct 2 20:41:03.065859 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Oct 2 20:41:03.065864 kernel: node 0: [mem 0x0000000000824000-0x000000003ec84fff] Oct 2 20:41:03.065870 kernel: node 0: [mem 0x000000003ec85000-0x000000003ecadfff] Oct 2 20:41:03.065875 kernel: node 0: [mem 0x000000003ecae000-0x000000003fd2dfff] Oct 2 20:41:03.065881 kernel: node 0: [mem 0x000000003fd2e000-0x000000003fd81fff] Oct 2 20:41:03.065886 kernel: node 0: [mem 0x000000003fd82000-0x000000003fd8dfff] Oct 2 20:41:03.065892 kernel: node 0: [mem 0x000000003fd8e000-0x000000003fd91fff] Oct 2 20:41:03.065897 kernel: node 0: [mem 0x000000003fd92000-0x000000003fffffff] Oct 2 20:41:03.065903 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 20:41:03.065910 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 20:41:03.065918 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Oct 2 20:41:03.065924 kernel: psci: probing for conduit method from ACPI. Oct 2 20:41:03.065930 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 20:41:03.065936 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 20:41:03.065943 kernel: psci: MIGRATE_INFO_TYPE not supported. Oct 2 20:41:03.065949 kernel: psci: SMC Calling Convention v1.4 Oct 2 20:41:03.065955 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Oct 2 20:41:03.065961 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Oct 2 20:41:03.065967 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 20:41:03.065973 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 20:41:03.065979 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 20:41:03.065985 kernel: Detected PIPT I-cache on CPU0 Oct 2 20:41:03.065991 kernel: CPU features: detected: GIC system register CPU interface Oct 2 20:41:03.065997 kernel: CPU features: detected: Hardware dirty bit management Oct 2 20:41:03.066003 kernel: CPU features: detected: Spectre-BHB Oct 2 20:41:03.066009 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 20:41:03.066016 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 20:41:03.066022 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 20:41:03.066029 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Oct 2 20:41:03.066035 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Oct 2 20:41:03.066040 kernel: Policy zone: Normal Oct 2 20:41:03.066048 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 20:41:03.066055 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:41:03.066061 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 20:41:03.072152 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 20:41:03.072170 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:41:03.072184 kernel: software IO TLB: mapped [mem 0x000000003abd6000-0x000000003ebd6000] (64MB) Oct 2 20:41:03.072191 kernel: Memory: 3992068K/4194160K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 202092K reserved, 0K cma-reserved) Oct 2 20:41:03.072197 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 20:41:03.072204 kernel: trace event string verifier disabled Oct 2 20:41:03.072210 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 20:41:03.072217 kernel: rcu: RCU event tracing is enabled. Oct 2 20:41:03.072224 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 20:41:03.072230 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 20:41:03.072237 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:41:03.072243 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:41:03.072249 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 20:41:03.072257 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 20:41:03.072263 kernel: GICv3: 960 SPIs implemented Oct 2 20:41:03.072269 kernel: GICv3: 0 Extended SPIs implemented Oct 2 20:41:03.072276 kernel: GICv3: Distributor has no Range Selector support Oct 2 20:41:03.072281 kernel: Root IRQ handler: gic_handle_irq Oct 2 20:41:03.072288 kernel: GICv3: 16 PPIs implemented Oct 2 20:41:03.072294 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Oct 2 20:41:03.072300 kernel: ITS: No ITS available, not enabling LPIs Oct 2 20:41:03.072306 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 20:41:03.072313 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 20:41:03.072319 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 20:41:03.072325 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 20:41:03.072333 kernel: Console: colour dummy device 80x25 Oct 2 20:41:03.072340 kernel: printk: console [tty1] enabled Oct 2 20:41:03.072346 kernel: ACPI: Core revision 20210730 Oct 2 20:41:03.072353 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 20:41:03.072359 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:41:03.072365 kernel: LSM: Security Framework initializing Oct 2 20:41:03.072372 kernel: SELinux: Initializing. Oct 2 20:41:03.072378 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 20:41:03.072385 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 20:41:03.072392 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Oct 2 20:41:03.072399 kernel: Hyper-V: Host Build 10.0.22477.1341-1-0 Oct 2 20:41:03.072405 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:41:03.072411 kernel: Remapping and enabling EFI services. Oct 2 20:41:03.072418 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:41:03.072424 kernel: Detected PIPT I-cache on CPU1 Oct 2 20:41:03.072430 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Oct 2 20:41:03.072437 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 20:41:03.072443 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 20:41:03.072451 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 20:41:03.072457 kernel: SMP: Total of 2 processors activated. Oct 2 20:41:03.072463 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 20:41:03.072470 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Oct 2 20:41:03.072476 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 20:41:03.072483 kernel: CPU features: detected: CRC32 instructions Oct 2 20:41:03.072489 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 20:41:03.072496 kernel: CPU features: detected: LSE atomic instructions Oct 2 20:41:03.072502 kernel: CPU features: detected: Privileged Access Never Oct 2 20:41:03.072510 kernel: CPU: All CPU(s) started at EL1 Oct 2 20:41:03.072516 kernel: alternatives: patching kernel code Oct 2 20:41:03.072527 kernel: devtmpfs: initialized Oct 2 20:41:03.072535 kernel: KASLR enabled Oct 2 20:41:03.072542 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:41:03.072548 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 20:41:03.072555 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:41:03.072561 kernel: SMBIOS 3.1.0 present. Oct 2 20:41:03.072568 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/16/2022 Oct 2 20:41:03.072575 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:41:03.072583 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 20:41:03.072590 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 20:41:03.072597 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 20:41:03.072604 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:41:03.072611 kernel: audit: type=2000 audit(0.090:1): state=initialized audit_enabled=0 res=1 Oct 2 20:41:03.072618 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:41:03.072624 kernel: cpuidle: using governor menu Oct 2 20:41:03.072633 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 20:41:03.072639 kernel: ASID allocator initialised with 32768 entries Oct 2 20:41:03.072646 kernel: ACPI: bus type PCI registered Oct 2 20:41:03.072653 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:41:03.072659 kernel: Serial: AMBA PL011 UART driver Oct 2 20:41:03.072666 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 20:41:03.072673 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 20:41:03.072680 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:41:03.072686 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 20:41:03.072694 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 20:41:03.072700 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 20:41:03.072707 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:41:03.072714 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:41:03.072720 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:41:03.072727 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:41:03.072733 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:41:03.072740 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:41:03.072747 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:41:03.072754 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 20:41:03.072761 kernel: ACPI: Interpreter enabled Oct 2 20:41:03.072768 kernel: ACPI: Using GIC for interrupt routing Oct 2 20:41:03.072774 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Oct 2 20:41:03.072781 kernel: printk: console [ttyAMA0] enabled Oct 2 20:41:03.072788 kernel: printk: bootconsole [pl11] disabled Oct 2 20:41:03.072794 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Oct 2 20:41:03.072801 kernel: iommu: Default domain type: Translated Oct 2 20:41:03.072807 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 20:41:03.072816 kernel: vgaarb: loaded Oct 2 20:41:03.072822 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:41:03.072829 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:41:03.072836 kernel: PTP clock support registered Oct 2 20:41:03.072842 kernel: Registered efivars operations Oct 2 20:41:03.072849 kernel: No ACPI PMU IRQ for CPU0 Oct 2 20:41:03.072855 kernel: No ACPI PMU IRQ for CPU1 Oct 2 20:41:03.072862 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 20:41:03.072868 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:41:03.072876 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:41:03.072883 kernel: pnp: PnP ACPI init Oct 2 20:41:03.072890 kernel: pnp: PnP ACPI: found 0 devices Oct 2 20:41:03.072896 kernel: NET: Registered PF_INET protocol family Oct 2 20:41:03.072903 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 20:41:03.072910 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 20:41:03.072917 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:41:03.072924 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 20:41:03.072930 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 20:41:03.072939 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 20:41:03.072945 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 20:41:03.072952 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 20:41:03.072959 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:41:03.072965 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:41:03.072972 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Oct 2 20:41:03.072978 kernel: kvm [1]: HYP mode not available Oct 2 20:41:03.072985 kernel: Initialise system trusted keyrings Oct 2 20:41:03.072992 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 20:41:03.072999 kernel: Key type asymmetric registered Oct 2 20:41:03.073006 kernel: Asymmetric key parser 'x509' registered Oct 2 20:41:03.073013 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:41:03.073019 kernel: io scheduler mq-deadline registered Oct 2 20:41:03.073026 kernel: io scheduler kyber registered Oct 2 20:41:03.073032 kernel: io scheduler bfq registered Oct 2 20:41:03.073039 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:41:03.073046 kernel: thunder_xcv, ver 1.0 Oct 2 20:41:03.073052 kernel: thunder_bgx, ver 1.0 Oct 2 20:41:03.073060 kernel: nicpf, ver 1.0 Oct 2 20:41:03.073121 kernel: nicvf, ver 1.0 Oct 2 20:41:03.073317 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 20:41:03.073378 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T20:41:02 UTC (1696279262) Oct 2 20:41:03.073387 kernel: efifb: probing for efifb Oct 2 20:41:03.073394 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 20:41:03.073401 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 20:41:03.073408 kernel: efifb: scrolling: redraw Oct 2 20:41:03.073417 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 20:41:03.073424 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 20:41:03.073430 kernel: fb0: EFI VGA frame buffer device Oct 2 20:41:03.073437 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Oct 2 20:41:03.073444 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 20:41:03.073450 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:41:03.073457 kernel: Segment Routing with IPv6 Oct 2 20:41:03.073463 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:41:03.073470 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:41:03.073478 kernel: Key type dns_resolver registered Oct 2 20:41:03.073485 kernel: registered taskstats version 1 Oct 2 20:41:03.073491 kernel: Loading compiled-in X.509 certificates Oct 2 20:41:03.073498 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 20:41:03.073505 kernel: Key type .fscrypt registered Oct 2 20:41:03.073512 kernel: Key type fscrypt-provisioning registered Oct 2 20:41:03.073518 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:41:03.073525 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:41:03.073532 kernel: ima: No architecture policies found Oct 2 20:41:03.073539 kernel: Freeing unused kernel memory: 34560K Oct 2 20:41:03.073546 kernel: Run /init as init process Oct 2 20:41:03.073553 kernel: with arguments: Oct 2 20:41:03.073559 kernel: /init Oct 2 20:41:03.073566 kernel: with environment: Oct 2 20:41:03.073572 kernel: HOME=/ Oct 2 20:41:03.073579 kernel: TERM=linux Oct 2 20:41:03.073585 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:41:03.073594 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:41:03.073604 systemd[1]: Detected virtualization microsoft. Oct 2 20:41:03.073612 systemd[1]: Detected architecture arm64. Oct 2 20:41:03.073619 systemd[1]: Running in initrd. Oct 2 20:41:03.073626 systemd[1]: No hostname configured, using default hostname. Oct 2 20:41:03.073633 systemd[1]: Hostname set to . Oct 2 20:41:03.073640 systemd[1]: Initializing machine ID from random generator. Oct 2 20:41:03.073648 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:41:03.073657 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:41:03.073664 systemd[1]: Reached target cryptsetup.target. Oct 2 20:41:03.073671 systemd[1]: Reached target paths.target. Oct 2 20:41:03.073678 systemd[1]: Reached target slices.target. Oct 2 20:41:03.073685 systemd[1]: Reached target swap.target. Oct 2 20:41:03.073692 systemd[1]: Reached target timers.target. Oct 2 20:41:03.073700 systemd[1]: Listening on iscsid.socket. Oct 2 20:41:03.073707 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:41:03.073716 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:41:03.073723 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:41:03.073730 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:41:03.073737 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:41:03.073745 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:41:03.073752 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:41:03.073759 systemd[1]: Reached target sockets.target. Oct 2 20:41:03.073766 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:41:03.073773 systemd[1]: Finished network-cleanup.service. Oct 2 20:41:03.073782 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:41:03.073789 systemd[1]: Starting systemd-journald.service... Oct 2 20:41:03.073796 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:41:03.073803 systemd[1]: Starting systemd-resolved.service... Oct 2 20:41:03.073810 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:41:03.073817 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:41:03.073829 systemd-journald[276]: Journal started Oct 2 20:41:03.073872 systemd-journald[276]: Runtime Journal (/run/log/journal/3120757fdb54460f991fc2bc7dbf2f9f) is 8.0M, max 78.6M, 70.6M free. Oct 2 20:41:03.045491 systemd-modules-load[277]: Inserted module 'overlay' Oct 2 20:41:03.091537 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:41:03.088021 systemd-resolved[278]: Positive Trust Anchors: Oct 2 20:41:03.124429 kernel: audit: type=1130 audit(1696279263.095:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.124449 kernel: Bridge firewalling registered Oct 2 20:41:03.124459 systemd[1]: Started systemd-journald.service. Oct 2 20:41:03.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.088030 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:41:03.138635 kernel: SCSI subsystem initialized Oct 2 20:41:03.088058 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:41:03.193962 kernel: audit: type=1130 audit(1696279263.168:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.193986 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:41:03.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.091145 systemd-resolved[278]: Defaulting to hostname 'linux'. Oct 2 20:41:03.221165 kernel: audit: type=1130 audit(1696279263.198:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.221185 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:41:03.198000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.118750 systemd-modules-load[277]: Inserted module 'br_netfilter' Oct 2 20:41:03.252192 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:41:03.252212 kernel: audit: type=1130 audit(1696279263.231:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.231000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.184247 systemd[1]: Started systemd-resolved.service. Oct 2 20:41:03.279737 kernel: audit: type=1130 audit(1696279263.256:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.217387 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:41:03.314618 kernel: audit: type=1130 audit(1696279263.294:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.252021 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:41:03.256535 systemd-modules-load[277]: Inserted module 'dm_multipath' Oct 2 20:41:03.256814 systemd[1]: Reached target nss-lookup.target. Oct 2 20:41:03.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.261914 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:41:03.284742 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:41:03.289311 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:41:03.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.295725 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:41:03.434122 kernel: audit: type=1130 audit(1696279263.344:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.434150 kernel: audit: type=1130 audit(1696279263.375:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.434160 kernel: audit: type=1130 audit(1696279263.384:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.334019 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:41:03.367536 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:41:03.444166 dracut-cmdline[299]: dracut-dracut-053 Oct 2 20:41:03.444166 dracut-cmdline[299]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=t Oct 2 20:41:03.444166 dracut-cmdline[299]: tyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 20:41:03.375492 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:41:03.404077 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:41:03.586088 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:41:03.598086 kernel: iscsi: registered transport (tcp) Oct 2 20:41:03.618403 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:41:03.618423 kernel: QLogic iSCSI HBA Driver Oct 2 20:41:03.703817 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:41:03.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:03.709348 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:41:03.775087 kernel: raid6: neonx8 gen() 13820 MB/s Oct 2 20:41:03.795086 kernel: raid6: neonx8 xor() 10835 MB/s Oct 2 20:41:03.815077 kernel: raid6: neonx4 gen() 13571 MB/s Oct 2 20:41:03.842087 kernel: raid6: neonx4 xor() 11241 MB/s Oct 2 20:41:03.863080 kernel: raid6: neonx2 gen() 12916 MB/s Oct 2 20:41:03.886081 kernel: raid6: neonx2 xor() 10304 MB/s Oct 2 20:41:03.906079 kernel: raid6: neonx1 gen() 8479 MB/s Oct 2 20:41:03.927081 kernel: raid6: neonx1 xor() 8759 MB/s Oct 2 20:41:03.948077 kernel: raid6: int64x8 gen() 6295 MB/s Oct 2 20:41:03.968077 kernel: raid6: int64x8 xor() 3550 MB/s Oct 2 20:41:03.988076 kernel: raid6: int64x4 gen() 7237 MB/s Oct 2 20:41:04.009081 kernel: raid6: int64x4 xor() 3855 MB/s Oct 2 20:41:04.029080 kernel: raid6: int64x2 gen() 6152 MB/s Oct 2 20:41:04.049076 kernel: raid6: int64x2 xor() 3322 MB/s Oct 2 20:41:04.070081 kernel: raid6: int64x1 gen() 5044 MB/s Oct 2 20:41:04.094518 kernel: raid6: int64x1 xor() 2645 MB/s Oct 2 20:41:04.094536 kernel: raid6: using algorithm neonx8 gen() 13820 MB/s Oct 2 20:41:04.094551 kernel: raid6: .... xor() 10835 MB/s, rmw enabled Oct 2 20:41:04.098809 kernel: raid6: using neon recovery algorithm Oct 2 20:41:04.121671 kernel: xor: measuring software checksum speed Oct 2 20:41:04.121685 kernel: 8regs : 17289 MB/sec Oct 2 20:41:04.130349 kernel: 32regs : 20760 MB/sec Oct 2 20:41:04.130359 kernel: arm64_neon : 27826 MB/sec Oct 2 20:41:04.130366 kernel: xor: using function: arm64_neon (27826 MB/sec) Oct 2 20:41:04.191089 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 20:41:04.209386 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:41:04.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:04.217000 audit: BPF prog-id=7 op=LOAD Oct 2 20:41:04.217000 audit: BPF prog-id=8 op=LOAD Oct 2 20:41:04.217940 systemd[1]: Starting systemd-udevd.service... Oct 2 20:41:04.239981 systemd-udevd[475]: Using default interface naming scheme 'v252'. Oct 2 20:41:04.245176 systemd[1]: Started systemd-udevd.service. Oct 2 20:41:04.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:04.255962 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:41:04.286777 dracut-pre-trigger[494]: rd.md=0: removing MD RAID activation Oct 2 20:41:04.338716 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:41:04.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:04.344157 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:41:04.386166 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:41:04.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:04.458094 kernel: hv_vmbus: Vmbus version:5.3 Oct 2 20:41:04.489567 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 20:41:04.489624 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 20:41:04.489634 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 20:41:04.489644 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 20:41:04.493084 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 20:41:04.493123 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 20:41:04.508072 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 20:41:04.516110 kernel: scsi host1: storvsc_host_t Oct 2 20:41:04.520082 kernel: scsi host0: storvsc_host_t Oct 2 20:41:04.533758 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 20:41:04.533826 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 20:41:04.552846 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 20:41:04.553119 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 20:41:04.564012 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 20:41:04.564239 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 20:41:04.568627 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 20:41:04.568784 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 20:41:04.575597 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 20:41:04.575728 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 20:41:04.581082 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:41:04.586087 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 20:41:04.720092 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (526) Oct 2 20:41:04.721547 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:41:04.750321 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:41:04.777386 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:41:04.791021 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:41:04.800532 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:41:04.807140 systemd[1]: Starting disk-uuid.service... Oct 2 20:41:04.831090 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:41:04.850096 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:41:05.857953 disk-uuid[592]: The operation has completed successfully. Oct 2 20:41:05.865132 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:41:05.937643 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:41:05.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:05.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:05.937740 systemd[1]: Finished disk-uuid.service. Oct 2 20:41:05.942708 systemd[1]: Starting verity-setup.service... Oct 2 20:41:05.982096 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 20:41:06.097715 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:41:06.104182 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:41:06.120304 systemd[1]: Finished verity-setup.service. Oct 2 20:41:06.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:06.168102 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:41:06.167615 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:41:06.171619 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:41:06.172427 systemd[1]: Starting ignition-setup.service... Oct 2 20:41:06.188642 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:41:06.215672 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 20:41:06.215726 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:41:06.220216 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:41:06.255501 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:41:06.352029 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:41:06.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:06.361703 systemd[1]: Finished ignition-setup.service. Oct 2 20:41:06.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:06.367118 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:41:06.374000 audit: BPF prog-id=9 op=LOAD Oct 2 20:41:06.375501 systemd[1]: Starting systemd-networkd.service... Oct 2 20:41:06.410946 systemd-networkd[865]: lo: Link UP Oct 2 20:41:06.410955 systemd-networkd[865]: lo: Gained carrier Oct 2 20:41:06.411368 systemd-networkd[865]: Enumeration completed Oct 2 20:41:06.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:06.411649 systemd[1]: Started systemd-networkd.service. Oct 2 20:41:06.414413 systemd-networkd[865]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:41:06.418084 systemd-networkd[865]: eth0: Link UP Oct 2 20:41:06.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:06.423260 systemd[1]: Reached target network.target. Oct 2 20:41:06.432927 systemd[1]: Starting iscsiuio.service... Oct 2 20:41:06.469042 iscsid[870]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:41:06.469042 iscsid[870]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 20:41:06.469042 iscsid[870]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:41:06.469042 iscsid[870]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:41:06.469042 iscsid[870]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:41:06.469042 iscsid[870]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:41:06.469042 iscsid[870]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:41:06.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:06.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:06.449093 systemd[1]: Started iscsiuio.service. Oct 2 20:41:06.458526 systemd[1]: Starting iscsid.service... Oct 2 20:41:06.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:06.475694 systemd[1]: Started iscsid.service. Oct 2 20:41:06.480488 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:41:06.502858 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:41:06.507622 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:41:06.512135 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:41:06.529424 systemd[1]: Reached target remote-fs.target. Oct 2 20:41:06.544940 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:41:06.570339 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:41:07.349896 ignition[864]: Ignition 2.14.0 Oct 2 20:41:07.350800 ignition[864]: Stage: fetch-offline Oct 2 20:41:07.350879 ignition[864]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:41:07.350905 ignition[864]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:41:07.382698 ignition[864]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:41:07.382884 ignition[864]: parsed url from cmdline: "" Oct 2 20:41:07.382888 ignition[864]: no config URL provided Oct 2 20:41:07.382893 ignition[864]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:41:07.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:07.389285 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:41:07.432020 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 20:41:07.432042 kernel: audit: type=1130 audit(1696279267.397:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:07.382903 ignition[864]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:41:07.407851 systemd[1]: Starting ignition-fetch.service... Oct 2 20:41:07.382909 ignition[864]: failed to fetch config: resource requires networking Oct 2 20:41:07.383156 ignition[864]: Ignition finished successfully Oct 2 20:41:07.421833 ignition[889]: Ignition 2.14.0 Oct 2 20:41:07.421839 ignition[889]: Stage: fetch Oct 2 20:41:07.421956 ignition[889]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:41:07.421980 ignition[889]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:41:07.450712 ignition[889]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:41:07.450859 ignition[889]: parsed url from cmdline: "" Oct 2 20:41:07.450862 ignition[889]: no config URL provided Oct 2 20:41:07.450868 ignition[889]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:41:07.450875 ignition[889]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:41:07.450906 ignition[889]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 20:41:07.451304 ignition[889]: GET error: Get "http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text": dial tcp 169.254.169.254:80: connect: network is unreachable Oct 2 20:41:07.651419 ignition[889]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #2 Oct 2 20:41:07.651529 ignition[889]: GET error: Get "http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text": dial tcp 169.254.169.254:80: connect: network is unreachable Oct 2 20:41:08.051704 ignition[889]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #3 Oct 2 20:41:08.051826 ignition[889]: GET error: Get "http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text": dial tcp 169.254.169.254:80: connect: network is unreachable Oct 2 20:41:08.153765 systemd-networkd[865]: eth0: Gained carrier Oct 2 20:41:08.158234 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 20:41:08.170125 systemd-networkd[865]: eth0: DHCPv4 address 10.200.20.29/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 20:41:08.852676 ignition[889]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #4 Oct 2 20:41:08.876911 ignition[889]: GET result: OK Oct 2 20:41:08.877045 ignition[889]: config has been read from IMDS userdata Oct 2 20:41:08.877103 ignition[889]: parsing config with SHA512: eae5a77b31e439eb53651f51c8dd8bb04cfb3149b6f4489d9e5286af891d823f2830b9e4bb359284e1302b2541e040f1ae2e0b3e468ad2571659c6a25ac14e13 Oct 2 20:41:08.899483 unknown[889]: fetched base config from "system" Oct 2 20:41:08.900118 unknown[889]: fetched base config from "system" Oct 2 20:41:08.900649 ignition[889]: fetch: fetch complete Oct 2 20:41:08.900125 unknown[889]: fetched user config from "azure" Oct 2 20:41:08.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:08.900654 ignition[889]: fetch: fetch passed Oct 2 20:41:08.945399 kernel: audit: type=1130 audit(1696279268.916:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:08.910237 systemd[1]: Finished ignition-fetch.service. Oct 2 20:41:08.900700 ignition[889]: Ignition finished successfully Oct 2 20:41:08.918010 systemd[1]: Starting ignition-kargs.service... Oct 2 20:41:08.952082 ignition[895]: Ignition 2.14.0 Oct 2 20:41:08.952088 ignition[895]: Stage: kargs Oct 2 20:41:08.952205 ignition[895]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:41:08.989773 kernel: audit: type=1130 audit(1696279268.973:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:08.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:08.952232 ignition[895]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:41:08.969264 systemd[1]: Finished ignition-kargs.service. Oct 2 20:41:08.965457 ignition[895]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:41:08.975095 systemd[1]: Starting ignition-disks.service... Oct 2 20:41:08.966818 ignition[895]: kargs: kargs passed Oct 2 20:41:08.966863 ignition[895]: Ignition finished successfully Oct 2 20:41:09.004806 ignition[901]: Ignition 2.14.0 Oct 2 20:41:09.014241 systemd[1]: Finished ignition-disks.service. Oct 2 20:41:09.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:09.004812 ignition[901]: Stage: disks Oct 2 20:41:09.051992 kernel: audit: type=1130 audit(1696279269.020:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:09.004914 ignition[901]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:41:09.038447 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:41:09.004932 ignition[901]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:41:09.044865 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:41:09.007723 ignition[901]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:41:09.050139 systemd[1]: Reached target local-fs.target. Oct 2 20:41:09.010650 ignition[901]: disks: disks passed Oct 2 20:41:09.055999 systemd[1]: Reached target sysinit.target. Oct 2 20:41:09.010713 ignition[901]: Ignition finished successfully Oct 2 20:41:09.065521 systemd[1]: Reached target basic.target. Oct 2 20:41:09.074262 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:41:09.126632 systemd-fsck[909]: ROOT: clean, 603/7326000 files, 481067/7359488 blocks Oct 2 20:41:09.137601 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:41:09.166073 kernel: audit: type=1130 audit(1696279269.141:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:09.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:09.159392 systemd[1]: Mounting sysroot.mount... Oct 2 20:41:09.181104 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:41:09.181993 systemd[1]: Mounted sysroot.mount. Oct 2 20:41:09.185579 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:41:09.200424 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:41:09.204887 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 20:41:09.209481 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:41:09.209519 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:41:09.215257 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:41:09.239788 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:41:09.248298 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:41:09.277680 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (919) Oct 2 20:41:09.277702 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 20:41:09.283128 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:41:09.283170 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:41:09.287155 initrd-setup-root[924]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:41:09.298269 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:41:09.310227 initrd-setup-root[950]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:41:09.322730 initrd-setup-root[958]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:41:09.335817 initrd-setup-root[966]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:41:09.486730 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:41:09.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:09.511020 systemd[1]: Starting ignition-mount.service... Oct 2 20:41:09.523533 kernel: audit: type=1130 audit(1696279269.491:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:09.519825 systemd[1]: Starting sysroot-boot.service... Oct 2 20:41:09.540056 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 20:41:09.540194 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 20:41:09.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:09.556022 systemd[1]: Finished sysroot-boot.service. Oct 2 20:41:09.581547 kernel: audit: type=1130 audit(1696279269.560:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:09.596534 ignition[990]: INFO : Ignition 2.14.0 Oct 2 20:41:09.596534 ignition[990]: INFO : Stage: mount Oct 2 20:41:09.604890 ignition[990]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:41:09.604890 ignition[990]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:41:09.604890 ignition[990]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:41:09.636087 ignition[990]: INFO : mount: mount passed Oct 2 20:41:09.636087 ignition[990]: INFO : Ignition finished successfully Oct 2 20:41:09.673489 kernel: audit: type=1130 audit(1696279269.644:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:09.673510 kernel: hv_netvsc 000d3a6c-e9bd-000d-3a6c-e9bd000d3a6c eth0: VF slot 1 added Oct 2 20:41:09.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:09.640028 systemd[1]: Finished ignition-mount.service. Oct 2 20:41:09.688294 kernel: hv_vmbus: registering driver hv_pci Oct 2 20:41:09.688319 kernel: hv_pci a08c6a21-43e9-43b9-8780-fbd6461d570e: PCI VMBus probing: Using version 0x10004 Oct 2 20:41:09.884289 kernel: hv_pci a08c6a21-43e9-43b9-8780-fbd6461d570e: PCI host bridge to bus 43e9:00 Oct 2 20:41:09.884495 kernel: pci_bus 43e9:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Oct 2 20:41:09.884592 kernel: pci_bus 43e9:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 20:41:09.884669 coreos-metadata[918]: Oct 02 20:41:09.884 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 20:41:09.905404 kernel: pci 43e9:00:02.0: [15b3:1018] type 00 class 0x020000 Oct 2 20:41:09.905455 coreos-metadata[918]: Oct 02 20:41:09.903 INFO Fetch successful Oct 2 20:41:09.924410 kernel: pci 43e9:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 20:41:09.938659 kernel: pci 43e9:00:02.0: enabling Extended Tags Oct 2 20:41:09.943566 coreos-metadata[918]: Oct 02 20:41:09.943 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 20:41:09.971042 kernel: pci 43e9:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 43e9:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Oct 2 20:41:09.971252 kernel: pci_bus 43e9:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 20:41:09.971337 coreos-metadata[918]: Oct 02 20:41:09.968 INFO Fetch successful Oct 2 20:41:09.985877 coreos-metadata[918]: Oct 02 20:41:09.975 INFO wrote hostname ci-3510.3.0-a-5b3cc0a007 to /sysroot/etc/hostname Oct 2 20:41:09.998122 kernel: pci 43e9:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 20:41:09.986564 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 20:41:10.034390 kernel: audit: type=1130 audit(1696279270.000:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:10.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:10.021223 systemd[1]: Starting ignition-files.service... Oct 2 20:41:10.041211 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:41:10.070118 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (998) Oct 2 20:41:10.070156 kernel: mlx5_core 43e9:00:02.0: firmware version: 16.31.2424 Oct 2 20:41:10.070289 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 20:41:10.082962 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:41:10.087298 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:41:10.094966 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:41:10.118203 ignition[1020]: INFO : Ignition 2.14.0 Oct 2 20:41:10.118203 ignition[1020]: INFO : Stage: files Oct 2 20:41:10.126546 ignition[1020]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:41:10.126546 ignition[1020]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:41:10.125998 systemd-networkd[865]: eth0: Gained IPv6LL Oct 2 20:41:10.149515 ignition[1020]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:41:10.149515 ignition[1020]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:41:10.161633 ignition[1020]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:41:10.161633 ignition[1020]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:41:10.183090 ignition[1020]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:41:10.183090 ignition[1020]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:41:10.183090 ignition[1020]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:41:10.182283 unknown[1020]: wrote ssh authorized keys file for user: core Oct 2 20:41:10.210870 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 20:41:10.210870 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 20:41:10.257082 kernel: mlx5_core 43e9:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Oct 2 20:41:10.381141 kernel: hv_netvsc 000d3a6c-e9bd-000d-3a6c-e9bd000d3a6c eth0: VF registering: eth1 Oct 2 20:41:10.381304 kernel: mlx5_core 43e9:00:02.0 eth1: joined to eth0 Oct 2 20:41:10.395085 kernel: mlx5_core 43e9:00:02.0 enP17385s1: renamed from eth1 Oct 2 20:41:10.398231 systemd-networkd[865]: eth1: Interface name change detected, renamed to enP17385s1. Oct 2 20:41:10.532769 systemd-networkd[865]: enP17385s1: Link UP Oct 2 20:41:10.536856 kernel: mlx5_core 43e9:00:02.0 enP17385s1: Link up Oct 2 20:41:10.574998 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 20:41:10.617486 systemd-networkd[865]: enP17385s1: Gained carrier Oct 2 20:41:10.622530 kernel: hv_netvsc 000d3a6c-e9bd-000d-3a6c-e9bd000d3a6c eth0: Data path switched to VF: enP17385s1 Oct 2 20:41:11.149058 ignition[1020]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 20:41:11.164020 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 20:41:11.164020 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 20:41:11.164020 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 20:41:11.554465 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 20:41:12.071556 ignition[1020]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 20:41:12.086892 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 20:41:12.086892 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:41:12.086892 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Oct 2 20:41:12.180072 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 20:41:13.249095 ignition[1020]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Oct 2 20:41:13.264877 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:41:13.264877 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:41:13.264877 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Oct 2 20:41:13.324897 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 20:41:15.184414 ignition[1020]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Oct 2 20:41:15.200011 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:41:15.200011 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:41:15.200011 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubectl: attempt #1 Oct 2 20:41:15.254902 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 20:41:16.285174 ignition[1020]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 14be61ec35669a27acf2df0380afb85b9b42311d50ca1165718421c5f605df1119ec9ae314696a674051712e80deeaa65e62d2d62ed4d107fe99d0aaf419dafc Oct 2 20:41:16.300220 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:41:16.300220 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:41:16.300220 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:41:16.300220 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:41:16.300220 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 20:41:16.542250 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 20:41:16.590279 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:41:16.600221 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:41:16.600221 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:41:16.600221 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:41:16.600221 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:41:16.600221 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 20:41:16.600221 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:41:16.666591 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (1023) Oct 2 20:41:16.649173 systemd[1]: mnt-oem609591491.mount: Deactivated successfully. Oct 2 20:41:16.672136 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem609591491" Oct 2 20:41:16.672136 ignition[1020]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem609591491": device or resource busy Oct 2 20:41:16.672136 ignition[1020]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem609591491", trying btrfs: device or resource busy Oct 2 20:41:16.672136 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem609591491" Oct 2 20:41:16.672136 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem609591491" Oct 2 20:41:16.672136 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem609591491" Oct 2 20:41:16.672136 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem609591491" Oct 2 20:41:16.672136 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 20:41:16.672136 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:41:16.672136 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:41:16.672136 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2446019374" Oct 2 20:41:16.672136 ignition[1020]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2446019374": device or resource busy Oct 2 20:41:16.672136 ignition[1020]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2446019374", trying btrfs: device or resource busy Oct 2 20:41:16.672136 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2446019374" Oct 2 20:41:16.939375 kernel: audit: type=1130 audit(1696279276.687:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.939401 kernel: audit: type=1130 audit(1696279276.753:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.939414 kernel: audit: type=1131 audit(1696279276.754:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.939424 kernel: audit: type=1130 audit(1696279276.799:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.939433 kernel: audit: type=1130 audit(1696279276.901:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.939567 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2446019374" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem2446019374" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem2446019374" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(1a): [started] setting preset to enabled for "waagent.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(1a): [finished] setting preset to enabled for "waagent.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 20:41:16.939567 ignition[1020]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 20:41:17.218050 kernel: audit: type=1131 audit(1696279276.929:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.218085 kernel: audit: type=1130 audit(1696279277.008:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.218098 kernel: audit: type=1131 audit(1696279277.103:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.674968 systemd[1]: Finished ignition-files.service. Oct 2 20:41:17.225735 ignition[1020]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:41:17.225735 ignition[1020]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:41:17.225735 ignition[1020]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:41:17.225735 ignition[1020]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:41:17.225735 ignition[1020]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:41:17.225735 ignition[1020]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:41:17.225735 ignition[1020]: INFO : files: files passed Oct 2 20:41:17.225735 ignition[1020]: INFO : Ignition finished successfully Oct 2 20:41:17.336226 kernel: audit: type=1131 audit(1696279277.263:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.336255 kernel: audit: type=1131 audit(1696279277.312:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.687948 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:41:17.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.346047 initrd-setup-root-after-ignition[1052]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:41:17.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.721393 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:41:17.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.729247 systemd[1]: Starting ignition-quench.service... Oct 2 20:41:16.749373 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:41:16.749465 systemd[1]: Finished ignition-quench.service. Oct 2 20:41:17.397402 iscsid[870]: iscsid shutting down. Oct 2 20:41:16.786383 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:41:17.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.824210 systemd[1]: Reached target ignition-complete.target. Oct 2 20:41:17.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.846600 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:41:17.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.439399 ignition[1065]: INFO : Ignition 2.14.0 Oct 2 20:41:17.439399 ignition[1065]: INFO : Stage: umount Oct 2 20:41:17.439399 ignition[1065]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:41:17.439399 ignition[1065]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:41:17.439399 ignition[1065]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:41:17.439399 ignition[1065]: INFO : umount: umount passed Oct 2 20:41:17.439399 ignition[1065]: INFO : Ignition finished successfully Oct 2 20:41:17.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.887419 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:41:17.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.887515 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:41:17.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.929444 systemd[1]: Reached target initrd-fs.target. Oct 2 20:41:17.520000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:16.956633 systemd[1]: Reached target initrd.target. Oct 2 20:41:16.971812 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:41:16.972678 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:41:17.004142 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:41:17.036788 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:41:17.055063 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:41:17.060962 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:41:17.574000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.073117 systemd[1]: Stopped target timers.target. Oct 2 20:41:17.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.088286 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:41:17.088438 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:41:17.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.126405 systemd[1]: Stopped target initrd.target. Oct 2 20:41:17.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.137846 systemd[1]: Stopped target basic.target. Oct 2 20:41:17.151895 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:41:17.166920 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:41:17.178200 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:41:17.189465 systemd[1]: Stopped target remote-fs.target. Oct 2 20:41:17.645000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.200317 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:41:17.211436 systemd[1]: Stopped target sysinit.target. Oct 2 20:41:17.221955 systemd[1]: Stopped target local-fs.target. Oct 2 20:41:17.229692 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:41:17.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.241395 systemd[1]: Stopped target swap.target. Oct 2 20:41:17.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.252579 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:41:17.692000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.252739 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:41:17.286759 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:41:17.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.299799 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:41:17.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.723000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:41:17.299941 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:41:17.331433 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:41:17.331606 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:41:17.341382 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:41:17.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.341534 systemd[1]: Stopped ignition-files.service. Oct 2 20:41:17.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.350013 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 20:41:17.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.350203 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 20:41:17.373209 systemd[1]: Stopping ignition-mount.service... Oct 2 20:41:17.394138 systemd[1]: Stopping iscsid.service... Oct 2 20:41:17.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.397779 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:41:17.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.399056 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:41:17.408567 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:41:17.417908 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:41:17.418260 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:41:17.423546 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:41:17.423685 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:41:17.442114 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:41:17.442212 systemd[1]: Stopped iscsid.service. Oct 2 20:41:17.849384 kernel: hv_netvsc 000d3a6c-e9bd-000d-3a6c-e9bd000d3a6c eth0: Data path switched from VF: enP17385s1 Oct 2 20:41:17.458136 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 20:41:17.471564 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:41:17.471658 systemd[1]: Stopped ignition-mount.service. Oct 2 20:41:17.476800 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:41:17.476891 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:41:17.489165 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:41:17.489222 systemd[1]: Stopped ignition-disks.service. Oct 2 20:41:17.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:17.494977 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:41:17.495014 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:41:17.503387 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 20:41:17.503420 systemd[1]: Stopped ignition-fetch.service. Oct 2 20:41:17.512383 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:41:17.512416 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:41:17.520768 systemd[1]: Stopped target paths.target. Oct 2 20:41:17.938128 systemd-journald[276]: Received SIGTERM from PID 1 (n/a). Oct 2 20:41:17.528605 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:41:17.538666 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:41:17.544211 systemd[1]: Stopped target slices.target. Oct 2 20:41:17.551921 systemd[1]: Stopped target sockets.target. Oct 2 20:41:17.559547 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:41:17.559593 systemd[1]: Closed iscsid.socket. Oct 2 20:41:17.566761 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:41:17.566806 systemd[1]: Stopped ignition-setup.service. Oct 2 20:41:17.574867 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:41:17.574905 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:41:17.583540 systemd[1]: Stopping iscsiuio.service... Oct 2 20:41:17.590751 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:41:17.590837 systemd[1]: Stopped iscsiuio.service. Oct 2 20:41:17.599085 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:41:17.599158 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:41:17.606714 systemd[1]: Stopped target network.target. Oct 2 20:41:17.613893 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:41:17.613934 systemd[1]: Closed iscsiuio.socket. Oct 2 20:41:17.620924 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:41:17.628456 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:41:17.636162 systemd-networkd[865]: eth0: DHCPv6 lease lost Oct 2 20:41:17.938000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:41:17.637801 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:41:17.637888 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:41:17.646062 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:41:17.646279 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:41:17.659485 systemd[1]: Stopping network-cleanup.service... Oct 2 20:41:17.668747 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:41:17.668838 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:41:17.676927 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:41:17.676986 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:41:17.688114 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:41:17.688170 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:41:17.692712 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:41:17.703402 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 20:41:17.703899 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:41:17.703991 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:41:17.710660 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:41:17.710778 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:41:17.723442 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:41:17.723487 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:41:17.733633 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:41:17.733672 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:41:17.743960 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:41:17.744014 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:41:17.753454 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:41:17.753499 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:41:17.762300 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:41:17.762339 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:41:17.775495 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:41:17.789420 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:41:17.789484 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:41:17.794785 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:41:17.794893 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:41:17.870667 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:41:17.870770 systemd[1]: Stopped network-cleanup.service. Oct 2 20:41:17.880254 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:41:17.889438 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:41:17.909261 systemd[1]: Switching root. Oct 2 20:41:17.939600 systemd-journald[276]: Journal stopped Oct 2 20:41:22.212085 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:41:22.212108 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:41:22.212118 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:41:22.212128 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:41:22.212136 kernel: SELinux: policy capability open_perms=1 Oct 2 20:41:22.212144 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:41:22.212153 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:41:22.212160 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:41:22.212169 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:41:22.212176 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:41:22.212186 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:41:22.212196 systemd[1]: Successfully loaded SELinux policy in 121.973ms. Oct 2 20:41:22.212206 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 12.926ms. Oct 2 20:41:22.212217 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:41:22.212228 systemd[1]: Detected virtualization microsoft. Oct 2 20:41:22.212237 systemd[1]: Detected architecture arm64. Oct 2 20:41:22.212246 systemd[1]: Detected first boot. Oct 2 20:41:22.212255 systemd[1]: Hostname set to . Oct 2 20:41:22.212264 systemd[1]: Initializing machine ID from random generator. Oct 2 20:41:22.212457 kernel: mlx5_core 43e9:00:02.0: poll_health:739:(pid 0): device's health compromised - reached miss count Oct 2 20:41:22.212471 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:41:22.212483 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:41:22.212493 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:41:22.212503 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:41:22.212513 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:41:22.212521 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:41:22.212531 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:41:22.212542 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:41:22.212551 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:41:22.212560 systemd[1]: Created slice system-getty.slice. Oct 2 20:41:22.212569 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:41:22.212578 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:41:22.212587 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:41:22.212596 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:41:22.212606 systemd[1]: Created slice user.slice. Oct 2 20:41:22.212615 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:41:22.212625 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:41:22.212635 systemd[1]: Set up automount boot.automount. Oct 2 20:41:22.212644 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:41:22.212653 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:41:22.212664 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:41:22.212674 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:41:22.212683 systemd[1]: Reached target integritysetup.target. Oct 2 20:41:22.212692 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:41:22.212701 systemd[1]: Reached target remote-fs.target. Oct 2 20:41:22.212711 systemd[1]: Reached target slices.target. Oct 2 20:41:22.212721 systemd[1]: Reached target swap.target. Oct 2 20:41:22.212729 systemd[1]: Reached target torcx.target. Oct 2 20:41:22.212739 systemd[1]: Reached target veritysetup.target. Oct 2 20:41:22.212748 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:41:22.212757 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:41:22.212766 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:41:22.212778 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:41:22.212787 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:41:22.212796 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:41:22.212806 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:41:22.212815 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:41:22.212824 systemd[1]: Mounting media.mount... Oct 2 20:41:22.212835 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:41:22.212845 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:41:22.212854 systemd[1]: Mounting tmp.mount... Oct 2 20:41:22.212863 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:41:22.212872 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:41:22.212882 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:41:22.212891 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:41:22.212900 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:41:22.212910 systemd[1]: Starting modprobe@drm.service... Oct 2 20:41:22.212920 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:41:22.212929 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:41:22.212939 systemd[1]: Starting modprobe@loop.service... Oct 2 20:41:22.212948 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:41:22.212957 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:41:22.212967 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:41:22.212976 kernel: fuse: init (API version 7.34) Oct 2 20:41:22.212985 kernel: kauditd_printk_skb: 62 callbacks suppressed Oct 2 20:41:22.212996 kernel: audit: type=1131 audit(1696279282.048:110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.213005 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:41:22.213015 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:41:22.213024 kernel: audit: type=1131 audit(1696279282.091:111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.213033 systemd[1]: Stopped systemd-journald.service. Oct 2 20:41:22.213043 systemd[1]: systemd-journald.service: Consumed 3.030s CPU time. Oct 2 20:41:22.213053 kernel: audit: type=1130 audit(1696279282.118:112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.213282 kernel: audit: type=1131 audit(1696279282.118:113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.213305 systemd[1]: Starting systemd-journald.service... Oct 2 20:41:22.213315 kernel: loop: module loaded Oct 2 20:41:22.213324 kernel: audit: type=1334 audit(1696279282.140:114): prog-id=21 op=LOAD Oct 2 20:41:22.213333 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:41:22.213342 kernel: audit: type=1334 audit(1696279282.140:115): prog-id=22 op=LOAD Oct 2 20:41:22.213352 kernel: audit: type=1334 audit(1696279282.140:116): prog-id=23 op=LOAD Oct 2 20:41:22.213426 kernel: audit: type=1334 audit(1696279282.140:117): prog-id=19 op=UNLOAD Oct 2 20:41:22.213442 kernel: audit: type=1334 audit(1696279282.140:118): prog-id=20 op=UNLOAD Oct 2 20:41:22.213451 kernel: audit: type=1305 audit(1696279282.208:119): op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:41:22.213465 systemd-journald[1207]: Journal started Oct 2 20:41:22.213513 systemd-journald[1207]: Runtime Journal (/run/log/journal/067d0745b09f4681bde7b8d7cb8eb8ab) is 8.0M, max 78.6M, 70.6M free. Oct 2 20:41:18.597000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:41:18.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:41:18.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:41:18.892000 audit: BPF prog-id=10 op=LOAD Oct 2 20:41:18.892000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:41:18.892000 audit: BPF prog-id=11 op=LOAD Oct 2 20:41:18.892000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:41:21.582000 audit: BPF prog-id=12 op=LOAD Oct 2 20:41:21.582000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:41:21.582000 audit: BPF prog-id=13 op=LOAD Oct 2 20:41:21.582000 audit: BPF prog-id=14 op=LOAD Oct 2 20:41:21.582000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:41:21.582000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:41:21.582000 audit: BPF prog-id=15 op=LOAD Oct 2 20:41:21.582000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:41:21.582000 audit: BPF prog-id=16 op=LOAD Oct 2 20:41:21.583000 audit: BPF prog-id=17 op=LOAD Oct 2 20:41:21.583000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:41:21.583000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:41:21.583000 audit: BPF prog-id=18 op=LOAD Oct 2 20:41:21.583000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:41:21.583000 audit: BPF prog-id=19 op=LOAD Oct 2 20:41:21.583000 audit: BPF prog-id=20 op=LOAD Oct 2 20:41:21.583000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:41:21.583000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:41:21.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:21.596000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:41:21.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:21.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.140000 audit: BPF prog-id=21 op=LOAD Oct 2 20:41:22.140000 audit: BPF prog-id=22 op=LOAD Oct 2 20:41:22.140000 audit: BPF prog-id=23 op=LOAD Oct 2 20:41:22.140000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:41:22.140000 audit: BPF prog-id=20 op=UNLOAD Oct 2 20:41:22.208000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:41:19.290395 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:41:21.580741 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:41:19.302514 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:41:21.584017 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:41:19.302536 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:41:21.584388 systemd[1]: systemd-journald.service: Consumed 3.030s CPU time. Oct 2 20:41:19.302572 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:41:19.302583 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:41:19.302617 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:41:19.302629 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:41:19.302826 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:41:19.302856 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:41:19.302867 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:41:19.303230 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:41:19.303264 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:41:19.303283 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:41:19.303296 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:41:19.303312 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:41:19.303325 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:19Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:41:21.138409 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:21Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:41:21.138663 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:21Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:41:21.138751 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:21Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:41:21.138901 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:21Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:41:21.138946 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:21Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:41:21.138999 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2023-10-02T20:41:21Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:41:22.208000 audit[1207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=ffffe5fa1e20 a2=4000 a3=1 items=0 ppid=1 pid=1207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:22.208000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:41:22.228081 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:41:22.240108 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:41:22.255768 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:41:22.265776 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:41:22.265827 systemd[1]: Stopped verity-setup.service. Oct 2 20:41:22.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.280184 systemd[1]: Started systemd-journald.service. Oct 2 20:41:22.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.281238 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:41:22.285283 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:41:22.289089 systemd[1]: Mounted media.mount. Oct 2 20:41:22.292994 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:41:22.297144 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:41:22.301505 systemd[1]: Mounted tmp.mount. Oct 2 20:41:22.305602 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:41:22.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.310385 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:41:22.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.315036 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:41:22.315256 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:41:22.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.319999 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:41:22.320192 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:41:22.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.325353 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:41:22.325534 systemd[1]: Finished modprobe@drm.service. Oct 2 20:41:22.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.330018 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:41:22.330331 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:41:22.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.335756 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:41:22.335936 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:41:22.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.341410 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:41:22.341588 systemd[1]: Finished modprobe@loop.service. Oct 2 20:41:22.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.346545 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:41:22.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.351698 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:41:22.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.357482 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:41:22.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.362519 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:41:22.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.367714 systemd[1]: Reached target network-pre.target. Oct 2 20:41:22.373476 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:41:22.379028 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:41:22.383197 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:41:22.398703 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:41:22.404464 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:41:22.408922 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:41:22.410214 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:41:22.414798 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:41:22.415990 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:41:22.421218 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:41:22.428157 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:41:22.435115 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:41:22.440613 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:41:22.452367 systemd-journald[1207]: Time spent on flushing to /var/log/journal/067d0745b09f4681bde7b8d7cb8eb8ab is 14.587ms for 1112 entries. Oct 2 20:41:22.452367 systemd-journald[1207]: System Journal (/var/log/journal/067d0745b09f4681bde7b8d7cb8eb8ab) is 8.0M, max 2.6G, 2.6G free. Oct 2 20:41:22.518019 systemd-journald[1207]: Received client request to flush runtime journal. Oct 2 20:41:22.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.461280 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:41:22.518403 udevadm[1221]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 20:41:22.466977 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:41:22.488435 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:41:22.519448 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:41:22.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.647279 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:41:22.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:23.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:23.005331 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:41:23.010000 audit: BPF prog-id=24 op=LOAD Oct 2 20:41:23.010000 audit: BPF prog-id=25 op=LOAD Oct 2 20:41:23.010000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:41:23.010000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:41:23.011694 systemd[1]: Starting systemd-udevd.service... Oct 2 20:41:23.032765 systemd-udevd[1224]: Using default interface naming scheme 'v252'. Oct 2 20:41:23.088588 systemd[1]: Started systemd-udevd.service. Oct 2 20:41:23.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:23.097000 audit: BPF prog-id=26 op=LOAD Oct 2 20:41:23.100261 systemd[1]: Starting systemd-networkd.service... Oct 2 20:41:23.132026 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:41:23.131000 audit: BPF prog-id=27 op=LOAD Oct 2 20:41:23.131000 audit: BPF prog-id=28 op=LOAD Oct 2 20:41:23.131000 audit: BPF prog-id=29 op=LOAD Oct 2 20:41:23.169372 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 20:41:23.175022 systemd[1]: Started systemd-userdbd.service. Oct 2 20:41:23.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:23.241000 audit[1225]: AVC avc: denied { confidentiality } for pid=1225 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:41:23.258095 kernel: hv_vmbus: registering driver hv_balloon Oct 2 20:41:23.258177 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 20:41:23.271719 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 20:41:23.271807 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 20:41:23.271822 kernel: hv_balloon: Memory hot add disabled on ARM64 Oct 2 20:41:23.286574 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 20:41:23.286654 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 20:41:23.294844 kernel: Console: switching to colour dummy device 80x25 Oct 2 20:41:23.304384 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 20:41:23.241000 audit[1225]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaaae47f2460 a1=aa2c a2=ffffa33824b0 a3=aaaae4754010 items=10 ppid=1224 pid=1225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:23.241000 audit: CWD cwd="/" Oct 2 20:41:23.241000 audit: PATH item=0 name=(null) inode=10670 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:41:23.241000 audit: PATH item=1 name=(null) inode=10671 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:41:23.241000 audit: PATH item=2 name=(null) inode=10670 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:41:23.241000 audit: PATH item=3 name=(null) inode=10672 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:41:23.241000 audit: PATH item=4 name=(null) inode=10670 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:41:23.241000 audit: PATH item=5 name=(null) inode=10673 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:41:23.241000 audit: PATH item=6 name=(null) inode=10670 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:41:23.241000 audit: PATH item=7 name=(null) inode=10674 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:41:23.241000 audit: PATH item=8 name=(null) inode=10670 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:41:23.241000 audit: PATH item=9 name=(null) inode=10675 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:41:23.241000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 20:41:23.319662 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 20:41:23.319747 kernel: hv_vmbus: registering driver hv_utils Oct 2 20:41:23.330970 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 20:41:23.331051 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 20:41:23.335084 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 20:41:22.950581 systemd-networkd[1245]: lo: Link UP Oct 2 20:41:23.022517 systemd-journald[1207]: Time jumped backwards, rotating. Oct 2 20:41:22.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.950590 systemd-networkd[1245]: lo: Gained carrier Oct 2 20:41:22.950971 systemd-networkd[1245]: Enumeration completed Oct 2 20:41:22.951067 systemd[1]: Started systemd-networkd.service. Oct 2 20:41:22.961897 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:41:22.973333 systemd-networkd[1245]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:41:23.035215 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1244) Oct 2 20:41:23.035280 kernel: mlx5_core 43e9:00:02.0 enP17385s1: Link up Oct 2 20:41:23.074661 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:41:23.087185 kernel: hv_netvsc 000d3a6c-e9bd-000d-3a6c-e9bd000d3a6c eth0: Data path switched to VF: enP17385s1 Oct 2 20:41:23.088776 systemd-networkd[1245]: enP17385s1: Link UP Oct 2 20:41:23.089074 systemd-networkd[1245]: eth0: Link UP Oct 2 20:41:23.089084 systemd-networkd[1245]: eth0: Gained carrier Oct 2 20:41:23.094224 systemd-networkd[1245]: enP17385s1: Gained carrier Oct 2 20:41:23.102298 systemd-networkd[1245]: eth0: DHCPv4 address 10.200.20.29/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 20:41:23.104676 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:41:23.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:23.111040 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:41:23.236025 lvm[1303]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:41:23.267223 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:41:23.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:23.271986 systemd[1]: Reached target cryptsetup.target. Oct 2 20:41:23.277380 systemd[1]: Starting lvm2-activation.service... Oct 2 20:41:23.284288 lvm[1304]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:41:23.315315 systemd[1]: Finished lvm2-activation.service. Oct 2 20:41:23.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:23.319623 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:41:23.324028 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:41:23.324055 systemd[1]: Reached target local-fs.target. Oct 2 20:41:23.328297 systemd[1]: Reached target machines.target. Oct 2 20:41:23.333576 systemd[1]: Starting ldconfig.service... Oct 2 20:41:23.337101 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:41:23.337158 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:41:23.338199 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:41:23.343431 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:41:23.350100 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:41:23.354587 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:41:23.354643 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:41:23.358360 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:41:23.369890 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1306 (bootctl) Oct 2 20:41:23.370979 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:41:23.601810 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:41:23.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:24.053241 systemd-tmpfiles[1309]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:41:24.086686 systemd-tmpfiles[1309]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:41:24.105467 systemd-fsck[1314]: fsck.fat 4.2 (2021-01-31) Oct 2 20:41:24.105467 systemd-fsck[1314]: /dev/sda1: 236 files, 113463/258078 clusters Oct 2 20:41:24.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:24.107964 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:41:24.116183 systemd[1]: Mounting boot.mount... Oct 2 20:41:24.129944 systemd-tmpfiles[1309]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:41:24.138545 systemd[1]: Mounted boot.mount. Oct 2 20:41:24.148500 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:41:24.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:24.196991 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:41:24.198620 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:41:24.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:24.542447 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:41:24.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:24.549073 systemd[1]: Starting audit-rules.service... Oct 2 20:41:24.553986 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:41:24.559776 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:41:24.564000 audit: BPF prog-id=30 op=LOAD Oct 2 20:41:24.566483 systemd[1]: Starting systemd-resolved.service... Oct 2 20:41:24.570000 audit: BPF prog-id=31 op=LOAD Oct 2 20:41:24.572103 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:41:24.577439 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:41:24.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:24.582577 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:41:24.589206 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:41:24.598000 audit[1326]: SYSTEM_BOOT pid=1326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:41:24.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:24.609059 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:41:24.632389 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:41:24.636330 systemd-networkd[1245]: eth0: Gained IPv6LL Oct 2 20:41:24.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:24.642134 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:41:24.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:24.673710 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:41:24.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:24.678632 systemd[1]: Reached target time-set.target. Oct 2 20:41:24.702629 systemd-resolved[1324]: Positive Trust Anchors: Oct 2 20:41:24.702933 systemd-resolved[1324]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:41:24.703019 systemd-resolved[1324]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:41:24.726000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:41:24.726000 audit[1341]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd791f600 a2=420 a3=0 items=0 ppid=1320 pid=1341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:24.726000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:41:24.729258 systemd-resolved[1324]: Using system hostname 'ci-3510.3.0-a-5b3cc0a007'. Oct 2 20:41:24.730990 systemd[1]: Started systemd-resolved.service. Oct 2 20:41:24.735570 augenrules[1341]: No rules Oct 2 20:41:24.736419 systemd[1]: Finished audit-rules.service. Oct 2 20:41:24.740693 systemd[1]: Reached target network.target. Oct 2 20:41:24.745144 systemd[1]: Reached target network-online.target. Oct 2 20:41:24.749942 systemd[1]: Reached target nss-lookup.target. Oct 2 20:41:24.868094 systemd-timesyncd[1325]: Contacted time server 162.159.200.123:123 (0.flatcar.pool.ntp.org). Oct 2 20:41:24.868142 systemd-timesyncd[1325]: Initial clock synchronization to Mon 2023-10-02 20:41:24.868273 UTC. Oct 2 20:41:27.652788 ldconfig[1305]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:41:27.671370 systemd[1]: Finished ldconfig.service. Oct 2 20:41:27.677324 systemd[1]: Starting systemd-update-done.service... Oct 2 20:41:27.697789 systemd[1]: Finished systemd-update-done.service. Oct 2 20:41:27.702424 systemd[1]: Reached target sysinit.target. Oct 2 20:41:27.706610 systemd[1]: Started motdgen.path. Oct 2 20:41:27.710758 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:41:27.716954 systemd[1]: Started logrotate.timer. Oct 2 20:41:27.720949 systemd[1]: Started mdadm.timer. Oct 2 20:41:27.724510 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:41:27.729438 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:41:27.729467 systemd[1]: Reached target paths.target. Oct 2 20:41:27.733346 systemd[1]: Reached target timers.target. Oct 2 20:41:27.737710 systemd[1]: Listening on dbus.socket. Oct 2 20:41:27.742810 systemd[1]: Starting docker.socket... Oct 2 20:41:27.749338 systemd[1]: Listening on sshd.socket. Oct 2 20:41:27.753320 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:41:27.753724 systemd[1]: Listening on docker.socket. Oct 2 20:41:27.757673 systemd[1]: Reached target sockets.target. Oct 2 20:41:27.761583 systemd[1]: Reached target basic.target. Oct 2 20:41:27.765315 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:41:27.765340 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:41:27.766546 systemd[1]: Starting containerd.service... Oct 2 20:41:27.771209 systemd[1]: Starting dbus.service... Oct 2 20:41:27.775354 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:41:27.780347 systemd[1]: Starting extend-filesystems.service... Oct 2 20:41:27.787379 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:41:27.788745 systemd[1]: Starting motdgen.service... Oct 2 20:41:27.793417 systemd[1]: Started nvidia.service. Oct 2 20:41:27.798106 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:41:27.803392 systemd[1]: Starting prepare-critools.service... Oct 2 20:41:27.810098 jq[1351]: false Oct 2 20:41:27.811289 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:41:27.816474 systemd[1]: Starting sshd-keygen.service... Oct 2 20:41:27.825386 systemd[1]: Starting systemd-logind.service... Oct 2 20:41:27.831011 extend-filesystems[1352]: Found sda Oct 2 20:41:27.831292 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:41:27.831351 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:41:27.831764 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:41:27.832429 systemd[1]: Starting update-engine.service... Oct 2 20:41:27.837352 extend-filesystems[1352]: Found sda1 Oct 2 20:41:27.864263 extend-filesystems[1352]: Found sda2 Oct 2 20:41:27.864263 extend-filesystems[1352]: Found sda3 Oct 2 20:41:27.864263 extend-filesystems[1352]: Found usr Oct 2 20:41:27.864263 extend-filesystems[1352]: Found sda4 Oct 2 20:41:27.864263 extend-filesystems[1352]: Found sda6 Oct 2 20:41:27.864263 extend-filesystems[1352]: Found sda7 Oct 2 20:41:27.864263 extend-filesystems[1352]: Found sda9 Oct 2 20:41:27.864263 extend-filesystems[1352]: Checking size of /dev/sda9 Oct 2 20:41:27.840577 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:41:28.007254 extend-filesystems[1352]: Old size kept for /dev/sda9 Oct 2 20:41:28.007254 extend-filesystems[1352]: Found sr0 Oct 2 20:41:27.955445 dbus-daemon[1350]: [system] SELinux support is enabled Oct 2 20:41:27.868032 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:41:28.041521 jq[1366]: true Oct 2 20:41:27.969278 dbus-daemon[1350]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 20:41:27.868237 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:41:27.869784 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:41:28.043234 tar[1377]: ./ Oct 2 20:41:28.043234 tar[1377]: ./loopback Oct 2 20:41:27.869941 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:41:28.043612 tar[1378]: crictl Oct 2 20:41:27.916833 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:41:28.043889 jq[1383]: true Oct 2 20:41:27.917001 systemd[1]: Finished motdgen.service. Oct 2 20:41:27.926566 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:41:27.926716 systemd[1]: Finished extend-filesystems.service. Oct 2 20:41:27.949456 systemd-logind[1364]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 20:41:27.950008 systemd-logind[1364]: New seat seat0. Oct 2 20:41:27.955598 systemd[1]: Started dbus.service. Oct 2 20:41:27.968711 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:41:27.968735 systemd[1]: Reached target system-config.target. Oct 2 20:41:27.975553 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:41:27.975568 systemd[1]: Reached target user-config.target. Oct 2 20:41:27.982510 systemd[1]: Started systemd-logind.service. Oct 2 20:41:28.036204 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 20:41:28.074811 tar[1377]: ./bandwidth Oct 2 20:41:28.081425 bash[1427]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:41:28.082298 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:41:28.089020 env[1384]: time="2023-10-02T20:41:28.088901124Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:41:28.147265 tar[1377]: ./ptp Oct 2 20:41:28.151053 env[1384]: time="2023-10-02T20:41:28.151005772Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:41:28.151319 env[1384]: time="2023-10-02T20:41:28.151299096Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:41:28.154313 env[1384]: time="2023-10-02T20:41:28.154282177Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:41:28.154428 env[1384]: time="2023-10-02T20:41:28.154413539Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:41:28.154745 env[1384]: time="2023-10-02T20:41:28.154722703Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:41:28.156217 env[1384]: time="2023-10-02T20:41:28.156197843Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:41:28.156317 env[1384]: time="2023-10-02T20:41:28.156301285Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:41:28.156394 env[1384]: time="2023-10-02T20:41:28.156382086Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:41:28.156548 env[1384]: time="2023-10-02T20:41:28.156533568Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:41:28.156850 env[1384]: time="2023-10-02T20:41:28.156825052Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:41:28.157118 env[1384]: time="2023-10-02T20:41:28.157098896Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:41:28.157209 env[1384]: time="2023-10-02T20:41:28.157195977Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:41:28.157328 env[1384]: time="2023-10-02T20:41:28.157311858Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:41:28.157409 env[1384]: time="2023-10-02T20:41:28.157396220Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:41:28.177885 update_engine[1365]: I1002 20:41:28.173254 1365 main.cc:92] Flatcar Update Engine starting Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.191686408Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.191728808Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.191799169Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.191844210Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.191859810Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.191873530Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.191996172Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.192418018Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.192440298Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.192465698Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.192478219Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.192491099Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.192643621Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:41:28.193499 env[1384]: time="2023-10-02T20:41:28.192727662Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:41:28.193814 env[1384]: time="2023-10-02T20:41:28.192992306Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:41:28.193814 env[1384]: time="2023-10-02T20:41:28.193032026Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.193814 env[1384]: time="2023-10-02T20:41:28.193047106Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:41:28.193814 env[1384]: time="2023-10-02T20:41:28.193154868Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.193814 env[1384]: time="2023-10-02T20:41:28.193351150Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.193814 env[1384]: time="2023-10-02T20:41:28.193365471Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.193814 env[1384]: time="2023-10-02T20:41:28.193376711Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.193814 env[1384]: time="2023-10-02T20:41:28.193388391Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.193814 env[1384]: time="2023-10-02T20:41:28.193401271Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.193814 env[1384]: time="2023-10-02T20:41:28.193420951Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.193814 env[1384]: time="2023-10-02T20:41:28.193433912Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.193814 env[1384]: time="2023-10-02T20:41:28.193447512Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:41:28.194482 env[1384]: time="2023-10-02T20:41:28.194150041Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.194482 env[1384]: time="2023-10-02T20:41:28.194185922Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.194482 env[1384]: time="2023-10-02T20:41:28.194199282Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.194482 env[1384]: time="2023-10-02T20:41:28.194211122Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:41:28.194482 env[1384]: time="2023-10-02T20:41:28.194225082Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:41:28.194482 env[1384]: time="2023-10-02T20:41:28.194235603Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:41:28.194482 env[1384]: time="2023-10-02T20:41:28.194262963Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:41:28.194482 env[1384]: time="2023-10-02T20:41:28.194301723Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:41:28.194838 env[1384]: time="2023-10-02T20:41:28.194725409Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:41:28.194838 env[1384]: time="2023-10-02T20:41:28.194799090Z" level=info msg="Connect containerd service" Oct 2 20:41:28.196520 systemd[1]: Started update-engine.service. Oct 2 20:41:28.274294 tar[1377]: ./vlan Oct 2 20:41:28.274326 env[1384]: time="2023-10-02T20:41:28.195071094Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:41:28.274326 env[1384]: time="2023-10-02T20:41:28.195797464Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:41:28.274326 env[1384]: time="2023-10-02T20:41:28.196017707Z" level=info msg="Start subscribing containerd event" Oct 2 20:41:28.274326 env[1384]: time="2023-10-02T20:41:28.196090548Z" level=info msg="Start recovering state" Oct 2 20:41:28.274326 env[1384]: time="2023-10-02T20:41:28.196142149Z" level=info msg="Start event monitor" Oct 2 20:41:28.274326 env[1384]: time="2023-10-02T20:41:28.196356632Z" level=info msg="Start snapshots syncer" Oct 2 20:41:28.274326 env[1384]: time="2023-10-02T20:41:28.196370072Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:41:28.274326 env[1384]: time="2023-10-02T20:41:28.201770985Z" level=info msg="Start streaming server" Oct 2 20:41:28.274326 env[1384]: time="2023-10-02T20:41:28.207430423Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:41:28.274326 env[1384]: time="2023-10-02T20:41:28.207501144Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:41:28.274326 env[1384]: time="2023-10-02T20:41:28.207564585Z" level=info msg="containerd successfully booted in 0.147366s" Oct 2 20:41:28.274543 update_engine[1365]: I1002 20:41:28.201658 1365 update_check_scheduler.cc:74] Next update check in 10m41s Oct 2 20:41:28.203632 systemd[1]: Started locksmithd.service. Oct 2 20:41:28.210010 systemd[1]: Started containerd.service. Oct 2 20:41:28.321586 tar[1377]: ./host-device Oct 2 20:41:28.389454 tar[1377]: ./tuning Oct 2 20:41:28.451581 tar[1377]: ./vrf Oct 2 20:41:28.505462 tar[1377]: ./sbr Oct 2 20:41:28.558841 tar[1377]: ./tap Oct 2 20:41:28.593175 tar[1377]: ./dhcp Oct 2 20:41:28.689733 systemd[1]: Finished prepare-critools.service. Oct 2 20:41:28.719196 tar[1377]: ./static Oct 2 20:41:28.743544 tar[1377]: ./firewall Oct 2 20:41:28.779754 tar[1377]: ./macvlan Oct 2 20:41:28.813200 tar[1377]: ./dummy Oct 2 20:41:28.845882 tar[1377]: ./bridge Oct 2 20:41:28.881548 tar[1377]: ./ipvlan Oct 2 20:41:28.914053 tar[1377]: ./portmap Oct 2 20:41:28.945390 tar[1377]: ./host-local Oct 2 20:41:28.994736 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:41:29.357883 locksmithd[1441]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:41:30.555434 sshd_keygen[1374]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:41:30.581215 systemd[1]: Finished sshd-keygen.service. Oct 2 20:41:30.587417 systemd[1]: Starting issuegen.service... Oct 2 20:41:30.592159 systemd[1]: Started waagent.service. Oct 2 20:41:30.600151 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:41:30.600364 systemd[1]: Finished issuegen.service. Oct 2 20:41:30.606383 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:41:30.630592 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:41:30.637270 systemd[1]: Started getty@tty1.service. Oct 2 20:41:30.642632 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 20:41:30.647463 systemd[1]: Reached target getty.target. Oct 2 20:41:30.651387 systemd[1]: Reached target multi-user.target. Oct 2 20:41:30.657223 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:41:30.668866 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:41:30.669006 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:41:30.674125 systemd[1]: Startup finished in 732ms (kernel) + 15.793s (initrd) + 12.647s (userspace) = 29.172s. Oct 2 20:41:30.903037 login[1480]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 20:41:30.906603 login[1479]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 20:41:30.927421 systemd[1]: Created slice user-500.slice. Oct 2 20:41:30.928579 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:41:30.931678 systemd-logind[1364]: New session 1 of user core. Oct 2 20:41:30.947585 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:41:30.949552 systemd[1]: Starting user@500.service... Oct 2 20:41:30.961026 (systemd)[1483]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:41:31.102566 systemd[1483]: Queued start job for default target default.target. Oct 2 20:41:31.103373 systemd[1483]: Reached target paths.target. Oct 2 20:41:31.103516 systemd[1483]: Reached target sockets.target. Oct 2 20:41:31.103624 systemd[1483]: Reached target timers.target. Oct 2 20:41:31.103769 systemd[1483]: Reached target basic.target. Oct 2 20:41:31.103891 systemd[1483]: Reached target default.target. Oct 2 20:41:31.103971 systemd[1]: Started user@500.service. Oct 2 20:41:31.104054 systemd[1483]: Startup finished in 133ms. Oct 2 20:41:31.104921 systemd[1]: Started session-1.scope. Oct 2 20:41:31.905070 login[1480]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 20:41:31.910056 systemd[1]: Started session-2.scope. Oct 2 20:41:31.910449 systemd-logind[1364]: New session 2 of user core. Oct 2 20:41:32.772966 waagent[1474]: 2023-10-02T20:41:32.772855Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 20:41:32.779247 waagent[1474]: 2023-10-02T20:41:32.779159Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 20:41:32.783778 waagent[1474]: 2023-10-02T20:41:32.783719Z INFO Daemon Daemon Python: 3.9.16 Oct 2 20:41:32.787996 waagent[1474]: 2023-10-02T20:41:32.787933Z INFO Daemon Daemon Run daemon Oct 2 20:41:32.792935 waagent[1474]: 2023-10-02T20:41:32.792876Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 20:41:32.811871 waagent[1474]: 2023-10-02T20:41:32.811728Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 20:41:32.826620 waagent[1474]: 2023-10-02T20:41:32.826487Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 20:41:32.836205 waagent[1474]: 2023-10-02T20:41:32.836118Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 20:41:32.841074 waagent[1474]: 2023-10-02T20:41:32.841011Z INFO Daemon Daemon Using waagent for provisioning Oct 2 20:41:32.846587 waagent[1474]: 2023-10-02T20:41:32.846524Z INFO Daemon Daemon Activate resource disk Oct 2 20:41:32.851000 waagent[1474]: 2023-10-02T20:41:32.850942Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 20:41:32.864862 waagent[1474]: 2023-10-02T20:41:32.864797Z INFO Daemon Daemon Found device: None Oct 2 20:41:32.869336 waagent[1474]: 2023-10-02T20:41:32.869265Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 20:41:32.877022 waagent[1474]: 2023-10-02T20:41:32.876966Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 20:41:32.888488 waagent[1474]: 2023-10-02T20:41:32.888422Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 20:41:32.894075 waagent[1474]: 2023-10-02T20:41:32.894008Z INFO Daemon Daemon Running default provisioning handler Oct 2 20:41:32.909788 waagent[1474]: 2023-10-02T20:41:32.909627Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 20:41:32.923883 waagent[1474]: 2023-10-02T20:41:32.923750Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 20:41:32.933328 waagent[1474]: 2023-10-02T20:41:32.933250Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 20:41:32.938051 waagent[1474]: 2023-10-02T20:41:32.937987Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 20:41:32.987024 waagent[1474]: 2023-10-02T20:41:32.986889Z INFO Daemon Daemon Successfully mounted dvd Oct 2 20:41:33.033046 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 20:41:33.047582 waagent[1474]: 2023-10-02T20:41:33.047448Z INFO Daemon Daemon Detect protocol endpoint Oct 2 20:41:33.052586 waagent[1474]: 2023-10-02T20:41:33.052513Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 20:41:33.059481 waagent[1474]: 2023-10-02T20:41:33.059405Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 20:41:33.065868 waagent[1474]: 2023-10-02T20:41:33.065806Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 20:41:33.071058 waagent[1474]: 2023-10-02T20:41:33.071002Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 20:41:33.076272 waagent[1474]: 2023-10-02T20:41:33.076216Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 20:41:33.124444 waagent[1474]: 2023-10-02T20:41:33.124379Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 20:41:33.131133 waagent[1474]: 2023-10-02T20:41:33.131090Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 20:41:33.136488 waagent[1474]: 2023-10-02T20:41:33.136430Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 20:41:33.918006 waagent[1474]: 2023-10-02T20:41:33.917868Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 20:41:33.932932 waagent[1474]: 2023-10-02T20:41:33.932859Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 20:41:33.938556 waagent[1474]: 2023-10-02T20:41:33.938493Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 20:41:34.024464 waagent[1474]: 2023-10-02T20:41:34.024321Z INFO Daemon Daemon Found private key matching thumbprint 023F9CDE9D97CDF4DFF17253C1661E0EAED81961 Oct 2 20:41:34.032601 waagent[1474]: 2023-10-02T20:41:34.032531Z INFO Daemon Daemon Certificate with thumbprint B7C4F91E01BC75B8C155B25A0157F8AA3CB006C9 has no matching private key. Oct 2 20:41:34.041950 waagent[1474]: 2023-10-02T20:41:34.041884Z INFO Daemon Daemon Fetch goal state completed Oct 2 20:41:34.068498 waagent[1474]: 2023-10-02T20:41:34.068442Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 4ff3f24c-b43b-433f-8f32-ac6580555da4 New eTag: 15054449220932827444] Oct 2 20:41:34.078507 waagent[1474]: 2023-10-02T20:41:34.078448Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 20:41:34.093635 waagent[1474]: 2023-10-02T20:41:34.093582Z INFO Daemon Daemon Starting provisioning Oct 2 20:41:34.098455 waagent[1474]: 2023-10-02T20:41:34.098396Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 20:41:34.103262 waagent[1474]: 2023-10-02T20:41:34.103200Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-5b3cc0a007] Oct 2 20:41:34.129338 waagent[1474]: 2023-10-02T20:41:34.129220Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-5b3cc0a007] Oct 2 20:41:34.135725 waagent[1474]: 2023-10-02T20:41:34.135655Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 20:41:34.141870 waagent[1474]: 2023-10-02T20:41:34.141812Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 20:41:34.161714 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 20:41:34.161881 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 20:41:34.161937 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 20:41:34.162155 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:41:34.166218 systemd-networkd[1245]: eth0: DHCPv6 lease lost Oct 2 20:41:34.168235 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:41:34.168405 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:41:34.170606 systemd[1]: Starting systemd-networkd.service... Oct 2 20:41:34.202873 systemd-networkd[1526]: enP17385s1: Link UP Oct 2 20:41:34.202884 systemd-networkd[1526]: enP17385s1: Gained carrier Oct 2 20:41:34.203745 systemd-networkd[1526]: eth0: Link UP Oct 2 20:41:34.203755 systemd-networkd[1526]: eth0: Gained carrier Oct 2 20:41:34.204053 systemd-networkd[1526]: lo: Link UP Oct 2 20:41:34.204062 systemd-networkd[1526]: lo: Gained carrier Oct 2 20:41:34.204358 systemd-networkd[1526]: eth0: Gained IPv6LL Oct 2 20:41:34.205392 systemd-networkd[1526]: Enumeration completed Oct 2 20:41:34.205523 systemd[1]: Started systemd-networkd.service. Oct 2 20:41:34.207128 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:41:34.213314 waagent[1474]: 2023-10-02T20:41:34.207799Z INFO Daemon Daemon Create user account if not exists Oct 2 20:41:34.213910 waagent[1474]: 2023-10-02T20:41:34.213842Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 20:41:34.219983 waagent[1474]: 2023-10-02T20:41:34.219916Z INFO Daemon Daemon Configure sudoer Oct 2 20:41:34.220146 systemd-networkd[1526]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:41:34.225435 waagent[1474]: 2023-10-02T20:41:34.225364Z INFO Daemon Daemon Configure sshd Oct 2 20:41:34.231212 waagent[1474]: 2023-10-02T20:41:34.231124Z INFO Daemon Daemon Deploy ssh public key. Oct 2 20:41:34.239237 systemd-networkd[1526]: eth0: DHCPv4 address 10.200.20.29/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 20:41:34.242185 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:41:35.490457 waagent[1474]: 2023-10-02T20:41:35.490382Z INFO Daemon Daemon Provisioning complete Oct 2 20:41:35.512091 waagent[1474]: 2023-10-02T20:41:35.512025Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 20:41:35.518417 waagent[1474]: 2023-10-02T20:41:35.518342Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 20:41:35.528554 waagent[1474]: 2023-10-02T20:41:35.528482Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 20:41:35.832081 waagent[1535]: 2023-10-02T20:41:35.831989Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 20:41:35.833197 waagent[1535]: 2023-10-02T20:41:35.833124Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:41:35.833436 waagent[1535]: 2023-10-02T20:41:35.833387Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:41:35.845774 waagent[1535]: 2023-10-02T20:41:35.845705Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 20:41:35.846064 waagent[1535]: 2023-10-02T20:41:35.846015Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 20:41:35.927930 waagent[1535]: 2023-10-02T20:41:35.927798Z INFO ExtHandler ExtHandler Found private key matching thumbprint 023F9CDE9D97CDF4DFF17253C1661E0EAED81961 Oct 2 20:41:35.928327 waagent[1535]: 2023-10-02T20:41:35.928274Z INFO ExtHandler ExtHandler Certificate with thumbprint B7C4F91E01BC75B8C155B25A0157F8AA3CB006C9 has no matching private key. Oct 2 20:41:35.928649 waagent[1535]: 2023-10-02T20:41:35.928600Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 20:41:35.942821 waagent[1535]: 2023-10-02T20:41:35.942767Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 1b0c2022-30a2-40cb-99eb-3c397a31e54c New eTag: 15054449220932827444] Oct 2 20:41:35.943615 waagent[1535]: 2023-10-02T20:41:35.943557Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 20:41:35.990324 waagent[1535]: 2023-10-02T20:41:35.990190Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 20:41:36.000596 waagent[1535]: 2023-10-02T20:41:36.000517Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1535 Oct 2 20:41:36.004489 waagent[1535]: 2023-10-02T20:41:36.004422Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 20:41:36.005950 waagent[1535]: 2023-10-02T20:41:36.005891Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 20:41:36.042001 waagent[1535]: 2023-10-02T20:41:36.041941Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 20:41:36.042614 waagent[1535]: 2023-10-02T20:41:36.042557Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 20:41:36.053318 waagent[1535]: 2023-10-02T20:41:36.053255Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 20:41:36.054036 waagent[1535]: 2023-10-02T20:41:36.053981Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 20:41:36.055388 waagent[1535]: 2023-10-02T20:41:36.055320Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 20:41:36.056875 waagent[1535]: 2023-10-02T20:41:36.056809Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 20:41:36.057253 waagent[1535]: 2023-10-02T20:41:36.057158Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:41:36.057735 waagent[1535]: 2023-10-02T20:41:36.057668Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:41:36.058378 waagent[1535]: 2023-10-02T20:41:36.058303Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 20:41:36.058697 waagent[1535]: 2023-10-02T20:41:36.058638Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 20:41:36.058697 waagent[1535]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 20:41:36.058697 waagent[1535]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 20:41:36.058697 waagent[1535]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 20:41:36.058697 waagent[1535]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:41:36.058697 waagent[1535]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:41:36.058697 waagent[1535]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:41:36.061062 waagent[1535]: 2023-10-02T20:41:36.060905Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 20:41:36.061334 waagent[1535]: 2023-10-02T20:41:36.061262Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:41:36.062119 waagent[1535]: 2023-10-02T20:41:36.062042Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:41:36.062764 waagent[1535]: 2023-10-02T20:41:36.062691Z INFO EnvHandler ExtHandler Configure routes Oct 2 20:41:36.062920 waagent[1535]: 2023-10-02T20:41:36.062871Z INFO EnvHandler ExtHandler Gateway:None Oct 2 20:41:36.063033 waagent[1535]: 2023-10-02T20:41:36.062990Z INFO EnvHandler ExtHandler Routes:None Oct 2 20:41:36.063591 waagent[1535]: 2023-10-02T20:41:36.063518Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 20:41:36.063911 waagent[1535]: 2023-10-02T20:41:36.063850Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 20:41:36.064857 waagent[1535]: 2023-10-02T20:41:36.064777Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 20:41:36.065080 waagent[1535]: 2023-10-02T20:41:36.065026Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 20:41:36.065297 waagent[1535]: 2023-10-02T20:41:36.065231Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 20:41:36.078827 waagent[1535]: 2023-10-02T20:41:36.078754Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 20:41:36.080412 waagent[1535]: 2023-10-02T20:41:36.080282Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 20:41:36.081869 waagent[1535]: 2023-10-02T20:41:36.081803Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 20:41:36.089085 waagent[1535]: 2023-10-02T20:41:36.088963Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1526' Oct 2 20:41:36.148101 waagent[1535]: 2023-10-02T20:41:36.148022Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 20:41:36.161859 waagent[1535]: 2023-10-02T20:41:36.161736Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 20:41:36.161859 waagent[1535]: Executing ['ip', '-a', '-o', 'link']: Oct 2 20:41:36.161859 waagent[1535]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 20:41:36.161859 waagent[1535]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:6c:e9:bd brd ff:ff:ff:ff:ff:ff Oct 2 20:41:36.161859 waagent[1535]: 3: enP17385s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:6c:e9:bd brd ff:ff:ff:ff:ff:ff\ altname enP17385p0s2 Oct 2 20:41:36.161859 waagent[1535]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 20:41:36.161859 waagent[1535]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 20:41:36.161859 waagent[1535]: 2: eth0 inet 10.200.20.29/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 20:41:36.161859 waagent[1535]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 20:41:36.161859 waagent[1535]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 20:41:36.161859 waagent[1535]: 2: eth0 inet6 fe80::20d:3aff:fe6c:e9bd/64 scope link \ valid_lft forever preferred_lft forever Oct 2 20:41:36.321111 waagent[1535]: 2023-10-02T20:41:36.321049Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.9.1.1 -- exiting Oct 2 20:41:36.532209 waagent[1474]: 2023-10-02T20:41:36.532025Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 20:41:36.535770 waagent[1474]: 2023-10-02T20:41:36.535717Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.9.1.1 to be the latest agent Oct 2 20:41:37.681274 waagent[1575]: 2023-10-02T20:41:37.681174Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.9.1.1) Oct 2 20:41:37.682287 waagent[1575]: 2023-10-02T20:41:37.682230Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 20:41:37.682515 waagent[1575]: 2023-10-02T20:41:37.682467Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 20:41:37.692287 waagent[1575]: 2023-10-02T20:41:37.692122Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 20:41:37.692817 waagent[1575]: 2023-10-02T20:41:37.692763Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:41:37.693055 waagent[1575]: 2023-10-02T20:41:37.693006Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:41:37.706316 waagent[1575]: 2023-10-02T20:41:37.706230Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 20:41:37.715573 waagent[1575]: 2023-10-02T20:41:37.715513Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 20:41:37.716816 waagent[1575]: 2023-10-02T20:41:37.716759Z INFO ExtHandler Oct 2 20:41:37.717062 waagent[1575]: 2023-10-02T20:41:37.717012Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 5e7f2f83-991b-4d97-91e9-78097b51646a eTag: 15054449220932827444 source: Fabric] Oct 2 20:41:37.717939 waagent[1575]: 2023-10-02T20:41:37.717882Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 20:41:37.719280 waagent[1575]: 2023-10-02T20:41:37.719220Z INFO ExtHandler Oct 2 20:41:37.719494 waagent[1575]: 2023-10-02T20:41:37.719446Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 20:41:37.726723 waagent[1575]: 2023-10-02T20:41:37.726676Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 20:41:37.727332 waagent[1575]: 2023-10-02T20:41:37.727284Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 20:41:37.749624 waagent[1575]: 2023-10-02T20:41:37.749561Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 20:41:37.836110 waagent[1575]: 2023-10-02T20:41:37.835966Z INFO ExtHandler Downloaded certificate {'thumbprint': 'B7C4F91E01BC75B8C155B25A0157F8AA3CB006C9', 'hasPrivateKey': False} Oct 2 20:41:37.837643 waagent[1575]: 2023-10-02T20:41:37.837574Z INFO ExtHandler Downloaded certificate {'thumbprint': '023F9CDE9D97CDF4DFF17253C1661E0EAED81961', 'hasPrivateKey': True} Oct 2 20:41:37.838883 waagent[1575]: 2023-10-02T20:41:37.838823Z INFO ExtHandler Fetch goal state completed Oct 2 20:41:37.864326 waagent[1575]: 2023-10-02T20:41:37.864248Z INFO ExtHandler ExtHandler WALinuxAgent-2.9.1.1 running as process 1575 Oct 2 20:41:37.868012 waagent[1575]: 2023-10-02T20:41:37.867942Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 20:41:37.869696 waagent[1575]: 2023-10-02T20:41:37.869635Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 20:41:37.876000 waagent[1575]: 2023-10-02T20:41:37.875950Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 20:41:37.876551 waagent[1575]: 2023-10-02T20:41:37.876495Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 20:41:37.887041 waagent[1575]: 2023-10-02T20:41:37.886982Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 20:41:37.887741 waagent[1575]: 2023-10-02T20:41:37.887684Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 20:41:37.895931 waagent[1575]: 2023-10-02T20:41:37.895818Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Oct 2 20:41:37.899854 waagent[1575]: 2023-10-02T20:41:37.899795Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 20:41:37.901607 waagent[1575]: 2023-10-02T20:41:37.901537Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 20:41:37.901884 waagent[1575]: 2023-10-02T20:41:37.901813Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:41:37.902451 waagent[1575]: 2023-10-02T20:41:37.902380Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:41:37.903069 waagent[1575]: 2023-10-02T20:41:37.902998Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 20:41:37.903411 waagent[1575]: 2023-10-02T20:41:37.903351Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 20:41:37.903411 waagent[1575]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 20:41:37.903411 waagent[1575]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 20:41:37.903411 waagent[1575]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 20:41:37.903411 waagent[1575]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:41:37.903411 waagent[1575]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:41:37.903411 waagent[1575]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:41:37.905988 waagent[1575]: 2023-10-02T20:41:37.905859Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 20:41:37.906511 waagent[1575]: 2023-10-02T20:41:37.906435Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:41:37.907091 waagent[1575]: 2023-10-02T20:41:37.907016Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:41:37.907597 waagent[1575]: 2023-10-02T20:41:37.907509Z INFO EnvHandler ExtHandler Configure routes Oct 2 20:41:37.907745 waagent[1575]: 2023-10-02T20:41:37.907695Z INFO EnvHandler ExtHandler Gateway:None Oct 2 20:41:37.907859 waagent[1575]: 2023-10-02T20:41:37.907816Z INFO EnvHandler ExtHandler Routes:None Oct 2 20:41:37.910931 waagent[1575]: 2023-10-02T20:41:37.910851Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 20:41:37.911200 waagent[1575]: 2023-10-02T20:41:37.911101Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 20:41:37.911992 waagent[1575]: 2023-10-02T20:41:37.911911Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 20:41:37.912489 waagent[1575]: 2023-10-02T20:41:37.912412Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 20:41:37.912628 waagent[1575]: 2023-10-02T20:41:37.912564Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 20:41:37.934793 waagent[1575]: 2023-10-02T20:41:37.934664Z INFO ExtHandler ExtHandler No requested version specified, checking for all versions for agent update (family: Prod) Oct 2 20:41:37.935914 waagent[1575]: 2023-10-02T20:41:37.935850Z INFO ExtHandler ExtHandler Downloading manifest Oct 2 20:41:37.950496 waagent[1575]: 2023-10-02T20:41:37.950407Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 20:41:37.950496 waagent[1575]: Executing ['ip', '-a', '-o', 'link']: Oct 2 20:41:37.950496 waagent[1575]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 20:41:37.950496 waagent[1575]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:6c:e9:bd brd ff:ff:ff:ff:ff:ff Oct 2 20:41:37.950496 waagent[1575]: 3: enP17385s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:6c:e9:bd brd ff:ff:ff:ff:ff:ff\ altname enP17385p0s2 Oct 2 20:41:37.950496 waagent[1575]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 20:41:37.950496 waagent[1575]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 20:41:37.950496 waagent[1575]: 2: eth0 inet 10.200.20.29/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 20:41:37.950496 waagent[1575]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 20:41:37.950496 waagent[1575]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 20:41:37.950496 waagent[1575]: 2: eth0 inet6 fe80::20d:3aff:fe6c:e9bd/64 scope link \ valid_lft forever preferred_lft forever Oct 2 20:41:37.981043 waagent[1575]: 2023-10-02T20:41:37.980978Z INFO ExtHandler ExtHandler Oct 2 20:41:37.981394 waagent[1575]: 2023-10-02T20:41:37.981334Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 6e1a207b-7a92-49b4-8a9d-7530328d2bbf correlation 1c9ea79b-3c2e-43f2-aa7d-fd55119b72c9 created: 2023-10-02T20:40:38.486580Z] Oct 2 20:41:37.982512 waagent[1575]: 2023-10-02T20:41:37.982452Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 20:41:37.984488 waagent[1575]: 2023-10-02T20:41:37.984432Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 3 ms] Oct 2 20:41:38.006624 waagent[1575]: 2023-10-02T20:41:38.006556Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 20:41:38.101005 waagent[1575]: 2023-10-02T20:41:38.100908Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.9.1.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: F21780EE-3742-45E1-8D9E-E6C1D6B16391;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 20:41:38.246117 waagent[1575]: 2023-10-02T20:41:38.245924Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules. Current Firewall rules: Oct 2 20:41:38.246117 waagent[1575]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:41:38.246117 waagent[1575]: pkts bytes target prot opt in out source destination Oct 2 20:41:38.246117 waagent[1575]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:41:38.246117 waagent[1575]: pkts bytes target prot opt in out source destination Oct 2 20:41:38.246117 waagent[1575]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:41:38.246117 waagent[1575]: pkts bytes target prot opt in out source destination Oct 2 20:41:38.246117 waagent[1575]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 20:41:38.246117 waagent[1575]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 20:41:38.246117 waagent[1575]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 20:41:38.258668 waagent[1575]: 2023-10-02T20:41:38.258539Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 20:41:38.258668 waagent[1575]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:41:38.258668 waagent[1575]: pkts bytes target prot opt in out source destination Oct 2 20:41:38.258668 waagent[1575]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:41:38.258668 waagent[1575]: pkts bytes target prot opt in out source destination Oct 2 20:41:38.258668 waagent[1575]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:41:38.258668 waagent[1575]: pkts bytes target prot opt in out source destination Oct 2 20:41:38.258668 waagent[1575]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 20:41:38.258668 waagent[1575]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 20:41:38.258668 waagent[1575]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 20:41:38.259253 waagent[1575]: 2023-10-02T20:41:38.259197Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 20:42:11.017360 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Oct 2 20:42:13.516248 update_engine[1365]: I1002 20:42:13.516208 1365 update_attempter.cc:505] Updating boot flags... Oct 2 20:42:15.111831 systemd[1]: Created slice system-sshd.slice. Oct 2 20:42:15.113383 systemd[1]: Started sshd@0-10.200.20.29:22-10.200.12.6:51860.service. Oct 2 20:42:15.593944 sshd[1662]: Accepted publickey for core from 10.200.12.6 port 51860 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:15.600474 sshd[1662]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:15.605453 systemd[1]: Started session-3.scope. Oct 2 20:42:15.606251 systemd-logind[1364]: New session 3 of user core. Oct 2 20:42:15.945719 systemd[1]: Started sshd@1-10.200.20.29:22-10.200.12.6:51866.service. Oct 2 20:42:16.356754 sshd[1667]: Accepted publickey for core from 10.200.12.6 port 51866 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:16.358357 sshd[1667]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:16.362236 systemd-logind[1364]: New session 4 of user core. Oct 2 20:42:16.362641 systemd[1]: Started session-4.scope. Oct 2 20:42:16.655640 sshd[1667]: pam_unix(sshd:session): session closed for user core Oct 2 20:42:16.658448 systemd-logind[1364]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:42:16.658531 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:42:16.659392 systemd[1]: sshd@1-10.200.20.29:22-10.200.12.6:51866.service: Deactivated successfully. Oct 2 20:42:16.660319 systemd-logind[1364]: Removed session 4. Oct 2 20:42:16.723810 systemd[1]: Started sshd@2-10.200.20.29:22-10.200.12.6:51870.service. Oct 2 20:42:17.128900 sshd[1673]: Accepted publickey for core from 10.200.12.6 port 51870 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:17.130538 sshd[1673]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:17.134595 systemd-logind[1364]: New session 5 of user core. Oct 2 20:42:17.135015 systemd[1]: Started session-5.scope. Oct 2 20:42:17.420860 sshd[1673]: pam_unix(sshd:session): session closed for user core Oct 2 20:42:17.423670 systemd[1]: sshd@2-10.200.20.29:22-10.200.12.6:51870.service: Deactivated successfully. Oct 2 20:42:17.424364 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:42:17.424889 systemd-logind[1364]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:42:17.425727 systemd-logind[1364]: Removed session 5. Oct 2 20:42:17.495852 systemd[1]: Started sshd@3-10.200.20.29:22-10.200.12.6:45550.service. Oct 2 20:42:17.930064 sshd[1679]: Accepted publickey for core from 10.200.12.6 port 45550 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:17.931580 sshd[1679]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:17.935448 systemd-logind[1364]: New session 6 of user core. Oct 2 20:42:17.935836 systemd[1]: Started session-6.scope. Oct 2 20:42:18.250979 sshd[1679]: pam_unix(sshd:session): session closed for user core Oct 2 20:42:18.253712 systemd-logind[1364]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:42:18.253793 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:42:18.254402 systemd[1]: sshd@3-10.200.20.29:22-10.200.12.6:45550.service: Deactivated successfully. Oct 2 20:42:18.255317 systemd-logind[1364]: Removed session 6. Oct 2 20:42:18.317857 systemd[1]: Started sshd@4-10.200.20.29:22-10.200.12.6:45560.service. Oct 2 20:42:18.714971 sshd[1685]: Accepted publickey for core from 10.200.12.6 port 45560 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:18.716539 sshd[1685]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:18.720212 systemd-logind[1364]: New session 7 of user core. Oct 2 20:42:18.720833 systemd[1]: Started session-7.scope. Oct 2 20:42:19.025737 sudo[1688]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:42:19.026467 sudo[1688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:42:19.045346 dbus-daemon[1350]: avc: received setenforce notice (enforcing=1) Oct 2 20:42:19.047136 sudo[1688]: pam_unix(sudo:session): session closed for user root Oct 2 20:42:19.116310 sshd[1685]: pam_unix(sshd:session): session closed for user core Oct 2 20:42:19.119357 systemd[1]: sshd@4-10.200.20.29:22-10.200.12.6:45560.service: Deactivated successfully. Oct 2 20:42:19.120197 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:42:19.120714 systemd-logind[1364]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:42:19.121471 systemd-logind[1364]: Removed session 7. Oct 2 20:42:19.190392 systemd[1]: Started sshd@5-10.200.20.29:22-10.200.12.6:45574.service. Oct 2 20:42:19.631355 sshd[1692]: Accepted publickey for core from 10.200.12.6 port 45574 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:19.632954 sshd[1692]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:19.636873 systemd-logind[1364]: New session 8 of user core. Oct 2 20:42:19.637308 systemd[1]: Started session-8.scope. Oct 2 20:42:19.885149 sudo[1696]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:42:19.885355 sudo[1696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:42:19.888761 sudo[1696]: pam_unix(sudo:session): session closed for user root Oct 2 20:42:19.894723 sudo[1695]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:42:19.895139 sudo[1695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:42:19.906255 systemd[1]: Stopping audit-rules.service... Oct 2 20:42:19.908000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:42:19.909314 auditctl[1699]: No rules Oct 2 20:42:19.912414 kernel: kauditd_printk_skb: 71 callbacks suppressed Oct 2 20:42:19.912472 kernel: audit: type=1305 audit(1696279339.908:174): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:42:19.912746 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:42:19.912908 systemd[1]: Stopped audit-rules.service. Oct 2 20:42:19.914484 systemd[1]: Starting audit-rules.service... Oct 2 20:42:19.908000 audit[1699]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffebcda9d0 a2=420 a3=0 items=0 ppid=1 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:19.948297 kernel: audit: type=1300 audit(1696279339.908:174): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffebcda9d0 a2=420 a3=0 items=0 ppid=1 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:19.948405 kernel: audit: type=1327 audit(1696279339.908:174): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:42:19.908000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:42:19.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:19.963072 augenrules[1716]: No rules Oct 2 20:42:19.964258 systemd[1]: Finished audit-rules.service. Oct 2 20:42:19.971666 kernel: audit: type=1131 audit(1696279339.912:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:19.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:19.988689 kernel: audit: type=1130 audit(1696279339.961:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:19.973412 sudo[1695]: pam_unix(sudo:session): session closed for user root Oct 2 20:42:19.973000 audit[1695]: USER_END pid=1695 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:20.007365 kernel: audit: type=1106 audit(1696279339.973:177): pid=1695 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:19.973000 audit[1695]: CRED_DISP pid=1695 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:20.024181 kernel: audit: type=1104 audit(1696279339.973:178): pid=1695 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:20.057360 sshd[1692]: pam_unix(sshd:session): session closed for user core Oct 2 20:42:20.058000 audit[1692]: USER_END pid=1692 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:20.058000 audit[1692]: CRED_DISP pid=1692 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:20.100181 kernel: audit: type=1106 audit(1696279340.058:179): pid=1692 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:20.100246 kernel: audit: type=1104 audit(1696279340.058:180): pid=1692 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:20.083272 systemd-logind[1364]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:42:20.084090 systemd[1]: sshd@5-10.200.20.29:22-10.200.12.6:45574.service: Deactivated successfully. Oct 2 20:42:20.084808 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:42:20.085899 systemd-logind[1364]: Removed session 8. Oct 2 20:42:20.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.29:22-10.200.12.6:45574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:20.118166 kernel: audit: type=1131 audit(1696279340.082:181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.29:22-10.200.12.6:45574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:20.131636 systemd[1]: Started sshd@6-10.200.20.29:22-10.200.12.6:45578.service. Oct 2 20:42:20.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.29:22-10.200.12.6:45578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:20.566000 audit[1722]: USER_ACCT pid=1722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:20.566563 sshd[1722]: Accepted publickey for core from 10.200.12.6 port 45578 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:20.567000 audit[1722]: CRED_ACQ pid=1722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:20.567000 audit[1722]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdbdca00 a2=3 a3=1 items=0 ppid=1 pid=1722 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:20.567000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:42:20.568428 sshd[1722]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:20.572775 systemd[1]: Started session-9.scope. Oct 2 20:42:20.573104 systemd-logind[1364]: New session 9 of user core. Oct 2 20:42:20.577000 audit[1722]: USER_START pid=1722 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:20.579000 audit[1724]: CRED_ACQ pid=1724 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:20.817000 audit[1725]: USER_ACCT pid=1725 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:20.818386 sudo[1725]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:42:20.818000 audit[1725]: CRED_REFR pid=1725 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:20.818968 sudo[1725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:42:20.820000 audit[1725]: USER_START pid=1725 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:21.678093 systemd[1]: Starting docker.service... Oct 2 20:42:21.725287 env[1740]: time="2023-10-02T20:42:21.725230820Z" level=info msg="Starting up" Oct 2 20:42:21.727272 env[1740]: time="2023-10-02T20:42:21.727234701Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:42:21.727272 env[1740]: time="2023-10-02T20:42:21.727264501Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:42:21.727394 env[1740]: time="2023-10-02T20:42:21.727286741Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:42:21.727394 env[1740]: time="2023-10-02T20:42:21.727297941Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:42:21.729778 env[1740]: time="2023-10-02T20:42:21.729746942Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:42:21.729778 env[1740]: time="2023-10-02T20:42:21.729771102Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:42:21.729895 env[1740]: time="2023-10-02T20:42:21.729788142Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:42:21.729895 env[1740]: time="2023-10-02T20:42:21.729797142Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:42:21.871190 env[1740]: time="2023-10-02T20:42:21.871133205Z" level=info msg="Loading containers: start." Oct 2 20:42:21.924000 audit[1768]: NETFILTER_CFG table=nat:8 family=2 entries=2 op=nft_register_chain pid=1768 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:21.924000 audit[1768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffff0e97630 a2=0 a3=1 items=0 ppid=1740 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:21.924000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:42:21.927000 audit[1770]: NETFILTER_CFG table=filter:9 family=2 entries=2 op=nft_register_chain pid=1770 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:21.927000 audit[1770]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffd222a8c0 a2=0 a3=1 items=0 ppid=1740 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:21.927000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:42:21.930000 audit[1772]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_chain pid=1772 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:21.930000 audit[1772]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff786e2d0 a2=0 a3=1 items=0 ppid=1740 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:21.930000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:42:21.933000 audit[1774]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:21.933000 audit[1774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffec405900 a2=0 a3=1 items=0 ppid=1740 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:21.933000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:42:21.936000 audit[1776]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1776 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:21.936000 audit[1776]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc665e410 a2=0 a3=1 items=0 ppid=1740 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:21.936000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:42:21.940000 audit[1778]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1778 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:21.940000 audit[1778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd564d850 a2=0 a3=1 items=0 ppid=1740 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:21.940000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:42:21.962000 audit[1780]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_register_chain pid=1780 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:21.962000 audit[1780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc27036a0 a2=0 a3=1 items=0 ppid=1740 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:21.962000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:42:21.965000 audit[1782]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:21.965000 audit[1782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc7fec510 a2=0 a3=1 items=0 ppid=1740 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:21.965000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:42:21.968000 audit[1784]: NETFILTER_CFG table=filter:16 family=2 entries=2 op=nft_register_chain pid=1784 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:21.968000 audit[1784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffec1544d0 a2=0 a3=1 items=0 ppid=1740 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:21.968000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:42:21.992000 audit[1788]: NETFILTER_CFG table=filter:17 family=2 entries=1 op=nft_unregister_rule pid=1788 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:21.992000 audit[1788]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffdc9e1200 a2=0 a3=1 items=0 ppid=1740 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:21.992000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:42:21.994000 audit[1789]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1789 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:21.994000 audit[1789]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff0bfb6b0 a2=0 a3=1 items=0 ppid=1740 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:21.994000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:42:22.014185 kernel: Initializing XFRM netlink socket Oct 2 20:42:22.027649 env[1740]: time="2023-10-02T20:42:22.027612714Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:42:22.061000 audit[1797]: NETFILTER_CFG table=nat:19 family=2 entries=2 op=nft_register_chain pid=1797 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.061000 audit[1797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd2b41cb0 a2=0 a3=1 items=0 ppid=1740 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.061000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:42:22.077000 audit[1800]: NETFILTER_CFG table=nat:20 family=2 entries=1 op=nft_register_rule pid=1800 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.077000 audit[1800]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffd8fa9a40 a2=0 a3=1 items=0 ppid=1740 pid=1800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.077000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:42:22.081000 audit[1803]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1803 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.081000 audit[1803]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffab38e50 a2=0 a3=1 items=0 ppid=1740 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.081000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:42:22.085000 audit[1805]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1805 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.085000 audit[1805]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff2d83e40 a2=0 a3=1 items=0 ppid=1740 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.085000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:42:22.089000 audit[1807]: NETFILTER_CFG table=nat:23 family=2 entries=2 op=nft_register_chain pid=1807 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.089000 audit[1807]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffdeef3a40 a2=0 a3=1 items=0 ppid=1740 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.089000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:42:22.092000 audit[1809]: NETFILTER_CFG table=nat:24 family=2 entries=2 op=nft_register_chain pid=1809 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.092000 audit[1809]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff190b530 a2=0 a3=1 items=0 ppid=1740 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.092000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:42:22.095000 audit[1811]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1811 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.095000 audit[1811]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffcd9d61a0 a2=0 a3=1 items=0 ppid=1740 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.095000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:42:22.098000 audit[1813]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1813 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.098000 audit[1813]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe8e59c40 a2=0 a3=1 items=0 ppid=1740 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.098000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:42:22.101000 audit[1815]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1815 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.101000 audit[1815]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffd6235650 a2=0 a3=1 items=0 ppid=1740 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.101000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:42:22.105000 audit[1817]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1817 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.105000 audit[1817]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffea600280 a2=0 a3=1 items=0 ppid=1740 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.105000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:42:22.108000 audit[1819]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1819 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.108000 audit[1819]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe35b68f0 a2=0 a3=1 items=0 ppid=1740 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.108000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:42:22.109531 systemd-networkd[1526]: docker0: Link UP Oct 2 20:42:22.133000 audit[1823]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_unregister_rule pid=1823 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.133000 audit[1823]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe7109bc0 a2=0 a3=1 items=0 ppid=1740 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.133000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:42:22.135000 audit[1824]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_rule pid=1824 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:22.135000 audit[1824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff1a572d0 a2=0 a3=1 items=0 ppid=1740 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:22.135000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:42:22.136192 env[1740]: time="2023-10-02T20:42:22.136143080Z" level=info msg="Loading containers: done." Oct 2 20:42:22.149766 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2418675146-merged.mount: Deactivated successfully. Oct 2 20:42:22.195016 env[1740]: time="2023-10-02T20:42:22.194918104Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:42:22.196099 env[1740]: time="2023-10-02T20:42:22.196050945Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:42:22.196438 env[1740]: time="2023-10-02T20:42:22.196421505Z" level=info msg="Daemon has completed initialization" Oct 2 20:42:22.295124 systemd[1]: Started docker.service. Oct 2 20:42:22.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:22.306984 env[1740]: time="2023-10-02T20:42:22.306918071Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:42:22.329871 systemd[1]: Reloading. Oct 2 20:42:22.415413 /usr/lib/systemd/system-generators/torcx-generator[1870]: time="2023-10-02T20:42:22Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:42:22.415439 /usr/lib/systemd/system-generators/torcx-generator[1870]: time="2023-10-02T20:42:22Z" level=info msg="torcx already run" Oct 2 20:42:22.548108 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:42:22.548126 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:42:22.563788 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit: BPF prog-id=38 op=LOAD Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.637000 audit: BPF prog-id=39 op=LOAD Oct 2 20:42:22.637000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:42:22.637000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit: BPF prog-id=40 op=LOAD Oct 2 20:42:22.638000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit: BPF prog-id=41 op=LOAD Oct 2 20:42:22.639000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit: BPF prog-id=42 op=LOAD Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.639000 audit: BPF prog-id=43 op=LOAD Oct 2 20:42:22.639000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:42:22.639000 audit: BPF prog-id=23 op=UNLOAD Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit: BPF prog-id=44 op=LOAD Oct 2 20:42:22.640000 audit: BPF prog-id=30 op=UNLOAD Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit: BPF prog-id=45 op=LOAD Oct 2 20:42:22.641000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit: BPF prog-id=46 op=LOAD Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.641000 audit: BPF prog-id=47 op=LOAD Oct 2 20:42:22.641000 audit: BPF prog-id=33 op=UNLOAD Oct 2 20:42:22.641000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit: BPF prog-id=48 op=LOAD Oct 2 20:42:22.642000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit: BPF prog-id=49 op=LOAD Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.642000 audit: BPF prog-id=50 op=LOAD Oct 2 20:42:22.642000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:42:22.642000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:42:22.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.643000 audit: BPF prog-id=51 op=LOAD Oct 2 20:42:22.643000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:42:22.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:22.645000 audit: BPF prog-id=52 op=LOAD Oct 2 20:42:22.645000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:42:22.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:22.664451 systemd[1]: Started kubelet.service. Oct 2 20:42:22.742749 kubelet[1929]: E1002 20:42:22.742683 1929 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:42:22.744762 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:42:22.744891 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:42:22.744000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:42:24.411555 env[1384]: time="2023-10-02T20:42:24.411500385Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 20:42:25.295347 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount502451297.mount: Deactivated successfully. Oct 2 20:42:28.578126 env[1384]: time="2023-10-02T20:42:28.578073697Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:28.593861 env[1384]: time="2023-10-02T20:42:28.593805981Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:28.603080 env[1384]: time="2023-10-02T20:42:28.603052544Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:28.607237 env[1384]: time="2023-10-02T20:42:28.607203665Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:28.607987 env[1384]: time="2023-10-02T20:42:28.607959306Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36\"" Oct 2 20:42:28.621682 env[1384]: time="2023-10-02T20:42:28.621652309Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 20:42:31.799057 env[1384]: time="2023-10-02T20:42:31.799002600Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:31.805972 env[1384]: time="2023-10-02T20:42:31.805940956Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:31.810625 env[1384]: time="2023-10-02T20:42:31.810598207Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:31.815649 env[1384]: time="2023-10-02T20:42:31.815608335Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:31.816245 env[1384]: time="2023-10-02T20:42:31.816214731Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b\"" Oct 2 20:42:31.830035 env[1384]: time="2023-10-02T20:42:31.829963523Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 20:42:32.807986 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:42:32.808159 systemd[1]: Stopped kubelet.service. Oct 2 20:42:32.828765 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 20:42:32.828875 kernel: audit: type=1130 audit(1696279352.808:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:32.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:32.809699 systemd[1]: Started kubelet.service. Oct 2 20:42:32.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:32.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:32.862756 kernel: audit: type=1131 audit(1696279352.808:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:32.862861 kernel: audit: type=1130 audit(1696279352.809:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:32.901942 kubelet[1960]: E1002 20:42:32.901897 1960 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:42:32.904709 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:42:32.904840 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:42:32.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:42:32.922189 kernel: audit: type=1131 audit(1696279352.904:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:42:34.045094 env[1384]: time="2023-10-02T20:42:34.045050931Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:34.052075 env[1384]: time="2023-10-02T20:42:34.052046970Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:34.056572 env[1384]: time="2023-10-02T20:42:34.056545423Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:34.062874 env[1384]: time="2023-10-02T20:42:34.062834707Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:34.063616 env[1384]: time="2023-10-02T20:42:34.063587822Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed\"" Oct 2 20:42:34.077979 env[1384]: time="2023-10-02T20:42:34.077951418Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 20:42:35.161063 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3350580427.mount: Deactivated successfully. Oct 2 20:42:35.956442 env[1384]: time="2023-10-02T20:42:35.956398178Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:35.966375 env[1384]: time="2023-10-02T20:42:35.966335642Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:35.971993 env[1384]: time="2023-10-02T20:42:35.971961210Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:35.975937 env[1384]: time="2023-10-02T20:42:35.975893987Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:35.976462 env[1384]: time="2023-10-02T20:42:35.976431624Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af\"" Oct 2 20:42:35.989923 env[1384]: time="2023-10-02T20:42:35.989878148Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:42:36.615997 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3749326193.mount: Deactivated successfully. Oct 2 20:42:36.645552 env[1384]: time="2023-10-02T20:42:36.645513755Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:36.655801 env[1384]: time="2023-10-02T20:42:36.655760578Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:36.661405 env[1384]: time="2023-10-02T20:42:36.661369667Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:36.667414 env[1384]: time="2023-10-02T20:42:36.667375474Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:36.668025 env[1384]: time="2023-10-02T20:42:36.667997151Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 20:42:36.681643 env[1384]: time="2023-10-02T20:42:36.681609995Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 20:42:37.574416 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount706974020.mount: Deactivated successfully. Oct 2 20:42:42.147739 env[1384]: time="2023-10-02T20:42:42.147692415Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:42.157478 env[1384]: time="2023-10-02T20:42:42.157420289Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:42.162710 env[1384]: time="2023-10-02T20:42:42.162675144Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:42.170334 env[1384]: time="2023-10-02T20:42:42.170296748Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:42.171092 env[1384]: time="2023-10-02T20:42:42.171059265Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Oct 2 20:42:42.186144 env[1384]: time="2023-10-02T20:42:42.186110074Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 20:42:43.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:43.058001 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:42:43.058197 systemd[1]: Stopped kubelet.service. Oct 2 20:42:43.059686 systemd[1]: Started kubelet.service. Oct 2 20:42:43.058000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:43.086352 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2424439365.mount: Deactivated successfully. Oct 2 20:42:43.102747 kernel: audit: type=1130 audit(1696279363.058:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:43.102869 kernel: audit: type=1131 audit(1696279363.058:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:43.102912 kernel: audit: type=1130 audit(1696279363.058:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:43.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:43.186309 kubelet[1987]: E1002 20:42:43.186259 1987 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:42:43.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:42:43.188639 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:42:43.188771 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:42:43.208197 kernel: audit: type=1131 audit(1696279363.188:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:42:43.714948 env[1384]: time="2023-10-02T20:42:43.714902612Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:43.730548 env[1384]: time="2023-10-02T20:42:43.730499101Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:43.737780 env[1384]: time="2023-10-02T20:42:43.737734667Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:43.744495 env[1384]: time="2023-10-02T20:42:43.744449077Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:43.745117 env[1384]: time="2023-10-02T20:42:43.745088034Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 20:42:49.654698 systemd[1]: Stopped kubelet.service. Oct 2 20:42:49.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:49.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:49.689367 kernel: audit: type=1130 audit(1696279369.655:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:49.689473 kernel: audit: type=1131 audit(1696279369.655:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:49.709453 systemd[1]: Reloading. Oct 2 20:42:49.783729 /usr/lib/systemd/system-generators/torcx-generator[2077]: time="2023-10-02T20:42:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:42:49.783758 /usr/lib/systemd/system-generators/torcx-generator[2077]: time="2023-10-02T20:42:49Z" level=info msg="torcx already run" Oct 2 20:42:49.904930 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:42:49.904949 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:42:49.919859 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:42:49.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:49.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.021178 kernel: audit: type=1400 audit(1696279369.984:400): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.021262 kernel: audit: type=1400 audit(1696279369.984:401): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:49.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.038299 kernel: audit: type=1400 audit(1696279369.984:402): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:49.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055566 kernel: audit: type=1400 audit(1696279369.984:403): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:49.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.074038 kernel: audit: type=1400 audit(1696279369.984:404): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.074116 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:42:49.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.096268 kernel: audit: type=1400 audit(1696279369.984:405): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.096361 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:42:49.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:49.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.003000 audit: BPF prog-id=53 op=LOAD Oct 2 20:42:50.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.021000 audit: BPF prog-id=54 op=LOAD Oct 2 20:42:50.021000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:42:50.021000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:42:50.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.038000 audit: BPF prog-id=55 op=LOAD Oct 2 20:42:50.038000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:42:50.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit: BPF prog-id=56 op=LOAD Oct 2 20:42:50.055000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit: BPF prog-id=57 op=LOAD Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit: BPF prog-id=58 op=LOAD Oct 2 20:42:50.055000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:42:50.055000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.102000 audit: BPF prog-id=59 op=LOAD Oct 2 20:42:50.102000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit: BPF prog-id=60 op=LOAD Oct 2 20:42:50.103000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit: BPF prog-id=61 op=LOAD Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.103000 audit: BPF prog-id=62 op=LOAD Oct 2 20:42:50.103000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:42:50.103000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit: BPF prog-id=63 op=LOAD Oct 2 20:42:50.104000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit: BPF prog-id=64 op=LOAD Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.104000 audit: BPF prog-id=65 op=LOAD Oct 2 20:42:50.104000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:42:50.104000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:42:50.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.105000 audit: BPF prog-id=66 op=LOAD Oct 2 20:42:50.105000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:42:50.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:50.107000 audit: BPF prog-id=67 op=LOAD Oct 2 20:42:50.107000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:42:50.135151 systemd[1]: Started kubelet.service. Oct 2 20:42:50.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:50.212404 kubelet[2137]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:42:50.212901 kubelet[2137]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:42:50.212901 kubelet[2137]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:42:50.213005 kubelet[2137]: I1002 20:42:50.212952 2137 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:42:51.117043 kubelet[2137]: I1002 20:42:51.117008 2137 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 20:42:51.117043 kubelet[2137]: I1002 20:42:51.117036 2137 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:42:51.117275 kubelet[2137]: I1002 20:42:51.117258 2137 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 20:42:51.121364 kubelet[2137]: E1002 20:42:51.121345 2137 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.20.29:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:51.121530 kubelet[2137]: I1002 20:42:51.121517 2137 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:42:51.123359 kubelet[2137]: W1002 20:42:51.123341 2137 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:42:51.123840 kubelet[2137]: I1002 20:42:51.123823 2137 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:42:51.124108 kubelet[2137]: I1002 20:42:51.124095 2137 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:42:51.124220 kubelet[2137]: I1002 20:42:51.124196 2137 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:42:51.124298 kubelet[2137]: I1002 20:42:51.124273 2137 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:42:51.124298 kubelet[2137]: I1002 20:42:51.124284 2137 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 20:42:51.124391 kubelet[2137]: I1002 20:42:51.124373 2137 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:42:51.130133 kubelet[2137]: I1002 20:42:51.130115 2137 kubelet.go:405] "Attempting to sync node with API server" Oct 2 20:42:51.130249 kubelet[2137]: I1002 20:42:51.130237 2137 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:42:51.130381 kubelet[2137]: I1002 20:42:51.130371 2137 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:42:51.130474 kubelet[2137]: I1002 20:42:51.130465 2137 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:42:51.133497 kubelet[2137]: I1002 20:42:51.133466 2137 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:42:51.133895 kubelet[2137]: W1002 20:42:51.133863 2137 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:42:51.134441 kubelet[2137]: I1002 20:42:51.134417 2137 server.go:1168] "Started kubelet" Oct 2 20:42:51.134569 kubelet[2137]: W1002 20:42:51.134525 2137 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.29:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-5b3cc0a007&limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:51.134609 kubelet[2137]: E1002 20:42:51.134574 2137 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.29:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-5b3cc0a007&limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:51.135848 kubelet[2137]: W1002 20:42:51.135817 2137 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.29:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:51.135961 kubelet[2137]: E1002 20:42:51.135950 2137 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.29:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:51.136189 kubelet[2137]: E1002 20:42:51.136089 2137 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-5b3cc0a007.178a6519cc49e77d", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-5b3cc0a007", UID:"ci-3510.3.0-a-5b3cc0a007", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-5b3cc0a007"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 42, 51, 134396285, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 42, 51, 134396285, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.20.29:6443/api/v1/namespaces/default/events": dial tcp 10.200.20.29:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:42:51.136581 kubelet[2137]: E1002 20:42:51.136563 2137 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:42:51.136000 audit[2137]: AVC avc: denied { mac_admin } for pid=2137 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:51.136000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:42:51.136000 audit[2137]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000be9290 a1=40006812d8 a2=4000be9260 a3=25 items=0 ppid=1 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.136000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:42:51.136886 kubelet[2137]: E1002 20:42:51.136874 2137 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:42:51.136957 kubelet[2137]: I1002 20:42:51.136664 2137 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:42:51.136000 audit[2137]: AVC avc: denied { mac_admin } for pid=2137 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:51.136000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:42:51.136000 audit[2137]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400080fae0 a1=400083a9d8 a2=400028cea0 a3=25 items=0 ppid=1 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.136000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:42:51.137244 kubelet[2137]: I1002 20:42:51.137230 2137 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:42:51.137374 kubelet[2137]: I1002 20:42:51.137364 2137 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:42:51.137932 kubelet[2137]: I1002 20:42:51.136743 2137 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:42:51.138595 kubelet[2137]: I1002 20:42:51.138559 2137 server.go:461] "Adding debug handlers to kubelet server" Oct 2 20:42:51.140603 kubelet[2137]: I1002 20:42:51.136807 2137 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:42:51.141907 kubelet[2137]: E1002 20:42:51.141668 2137 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-5b3cc0a007\" not found" Oct 2 20:42:51.141907 kubelet[2137]: I1002 20:42:51.141750 2137 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 20:42:51.141907 kubelet[2137]: I1002 20:42:51.141858 2137 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 20:42:51.142244 kubelet[2137]: W1002 20:42:51.142199 2137 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.29:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:51.142244 kubelet[2137]: E1002 20:42:51.142246 2137 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.29:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:51.143024 kubelet[2137]: E1002 20:42:51.142975 2137 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.29:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-5b3cc0a007?timeout=10s\": dial tcp 10.200.20.29:6443: connect: connection refused" interval="200ms" Oct 2 20:42:51.143000 audit[2147]: NETFILTER_CFG table=mangle:32 family=2 entries=2 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:51.143000 audit[2147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff604dc60 a2=0 a3=1 items=0 ppid=2137 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.143000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:42:51.145000 audit[2148]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:51.145000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe25da4f0 a2=0 a3=1 items=0 ppid=2137 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.145000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:42:51.149000 audit[2150]: NETFILTER_CFG table=filter:34 family=2 entries=2 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:51.149000 audit[2150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffecc4d0e0 a2=0 a3=1 items=0 ppid=2137 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.149000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:42:51.153000 audit[2152]: NETFILTER_CFG table=filter:35 family=2 entries=2 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:51.153000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe249de40 a2=0 a3=1 items=0 ppid=2137 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.153000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:42:51.168000 audit[2155]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_rule pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:51.168000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff800bd40 a2=0 a3=1 items=0 ppid=2137 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.168000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:42:51.168805 kubelet[2137]: I1002 20:42:51.168788 2137 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:42:51.170000 audit[2157]: NETFILTER_CFG table=mangle:37 family=10 entries=2 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:42:51.170000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdfdfd4a0 a2=0 a3=1 items=0 ppid=2137 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.170000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:42:51.170953 kubelet[2137]: I1002 20:42:51.170938 2137 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:42:51.171088 kubelet[2137]: I1002 20:42:51.171077 2137 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 20:42:51.171176 kubelet[2137]: I1002 20:42:51.171156 2137 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 20:42:51.171286 kubelet[2137]: E1002 20:42:51.171276 2137 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:42:51.173000 audit[2160]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:42:51.173000 audit[2160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffefde8390 a2=0 a3=1 items=0 ppid=2137 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.173000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:42:51.175000 audit[2161]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:51.175000 audit[2161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe68e2540 a2=0 a3=1 items=0 ppid=2137 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.175000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:42:51.176344 kubelet[2137]: W1002 20:42:51.176292 2137 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.29:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:51.176567 kubelet[2137]: E1002 20:42:51.176555 2137 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.29:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:51.177000 audit[2164]: NETFILTER_CFG table=nat:40 family=10 entries=2 op=nft_register_chain pid=2164 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:42:51.177000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffff5d14200 a2=0 a3=1 items=0 ppid=2137 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.177000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:42:51.178000 audit[2165]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:51.178000 audit[2165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffce06a0f0 a2=0 a3=1 items=0 ppid=2137 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.178000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:42:51.178000 audit[2166]: NETFILTER_CFG table=filter:42 family=10 entries=2 op=nft_register_chain pid=2166 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:42:51.178000 audit[2166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff72c37c0 a2=0 a3=1 items=0 ppid=2137 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.178000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:42:51.180000 audit[2167]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:42:51.180000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff8ff4ec0 a2=0 a3=1 items=0 ppid=2137 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.180000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:42:51.272045 kubelet[2137]: E1002 20:42:51.272014 2137 kubelet.go:2281] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 20:42:51.280947 kubelet[2137]: I1002 20:42:51.280928 2137 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.281476 kubelet[2137]: I1002 20:42:51.281454 2137 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:42:51.281563 kubelet[2137]: I1002 20:42:51.281483 2137 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:42:51.281563 kubelet[2137]: I1002 20:42:51.281503 2137 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:42:51.281866 kubelet[2137]: E1002 20:42:51.281847 2137 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.29:6443/api/v1/nodes\": dial tcp 10.200.20.29:6443: connect: connection refused" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.301394 kubelet[2137]: I1002 20:42:51.301363 2137 policy_none.go:49] "None policy: Start" Oct 2 20:42:51.302175 kubelet[2137]: I1002 20:42:51.302147 2137 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:42:51.302290 kubelet[2137]: I1002 20:42:51.302280 2137 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:42:51.311826 systemd[1]: Created slice kubepods.slice. Oct 2 20:42:51.315854 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:42:51.318942 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:42:51.325063 kubelet[2137]: I1002 20:42:51.325048 2137 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:42:51.326000 audit[2137]: AVC avc: denied { mac_admin } for pid=2137 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:51.326000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:42:51.326000 audit[2137]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000fba120 a1=4000ffc558 a2=4000fba0f0 a3=25 items=0 ppid=1 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:51.326000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:42:51.327286 kubelet[2137]: I1002 20:42:51.327270 2137 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:42:51.327512 kubelet[2137]: I1002 20:42:51.327498 2137 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:42:51.328227 kubelet[2137]: E1002 20:42:51.328050 2137 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-5b3cc0a007\" not found" Oct 2 20:42:51.343737 kubelet[2137]: E1002 20:42:51.343719 2137 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.29:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-5b3cc0a007?timeout=10s\": dial tcp 10.200.20.29:6443: connect: connection refused" interval="400ms" Oct 2 20:42:51.473152 kubelet[2137]: I1002 20:42:51.473077 2137 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:42:51.475723 kubelet[2137]: I1002 20:42:51.475702 2137 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:42:51.476816 kubelet[2137]: I1002 20:42:51.476795 2137 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:42:51.481035 systemd[1]: Created slice kubepods-burstable-podb4c7dbf2e95236fe9186b8ba973ff2ee.slice. Oct 2 20:42:51.483880 kubelet[2137]: I1002 20:42:51.483864 2137 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.484228 kubelet[2137]: E1002 20:42:51.484214 2137 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.29:6443/api/v1/nodes\": dial tcp 10.200.20.29:6443: connect: connection refused" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.488875 systemd[1]: Created slice kubepods-burstable-podb8d3065fcb35173868035a1ee46bf22e.slice. Oct 2 20:42:51.502810 systemd[1]: Created slice kubepods-burstable-pod68bd69fa99b9c1aa7efc2da658e01f97.slice. Oct 2 20:42:51.544850 kubelet[2137]: I1002 20:42:51.544822 2137 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b4c7dbf2e95236fe9186b8ba973ff2ee-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b4c7dbf2e95236fe9186b8ba973ff2ee\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.545016 kubelet[2137]: I1002 20:42:51.545004 2137 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b4c7dbf2e95236fe9186b8ba973ff2ee-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b4c7dbf2e95236fe9186b8ba973ff2ee\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.545094 kubelet[2137]: I1002 20:42:51.545085 2137 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b8d3065fcb35173868035a1ee46bf22e-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b8d3065fcb35173868035a1ee46bf22e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.545207 kubelet[2137]: I1002 20:42:51.545196 2137 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b8d3065fcb35173868035a1ee46bf22e-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b8d3065fcb35173868035a1ee46bf22e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.545299 kubelet[2137]: I1002 20:42:51.545289 2137 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/68bd69fa99b9c1aa7efc2da658e01f97-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-5b3cc0a007\" (UID: \"68bd69fa99b9c1aa7efc2da658e01f97\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.545379 kubelet[2137]: I1002 20:42:51.545371 2137 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b4c7dbf2e95236fe9186b8ba973ff2ee-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b4c7dbf2e95236fe9186b8ba973ff2ee\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.545477 kubelet[2137]: I1002 20:42:51.545457 2137 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b8d3065fcb35173868035a1ee46bf22e-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b8d3065fcb35173868035a1ee46bf22e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.545521 kubelet[2137]: I1002 20:42:51.545496 2137 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b8d3065fcb35173868035a1ee46bf22e-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b8d3065fcb35173868035a1ee46bf22e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.545548 kubelet[2137]: I1002 20:42:51.545541 2137 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b8d3065fcb35173868035a1ee46bf22e-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b8d3065fcb35173868035a1ee46bf22e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.744915 kubelet[2137]: E1002 20:42:51.744825 2137 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.29:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-5b3cc0a007?timeout=10s\": dial tcp 10.200.20.29:6443: connect: connection refused" interval="800ms" Oct 2 20:42:51.788833 env[1384]: time="2023-10-02T20:42:51.788771454Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-5b3cc0a007,Uid:b4c7dbf2e95236fe9186b8ba973ff2ee,Namespace:kube-system,Attempt:0,}" Oct 2 20:42:51.791740 env[1384]: time="2023-10-02T20:42:51.791698163Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-5b3cc0a007,Uid:b8d3065fcb35173868035a1ee46bf22e,Namespace:kube-system,Attempt:0,}" Oct 2 20:42:51.805840 env[1384]: time="2023-10-02T20:42:51.805588951Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-5b3cc0a007,Uid:68bd69fa99b9c1aa7efc2da658e01f97,Namespace:kube-system,Attempt:0,}" Oct 2 20:42:51.885776 kubelet[2137]: I1002 20:42:51.885629 2137 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:51.886226 kubelet[2137]: E1002 20:42:51.886202 2137 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.29:6443/api/v1/nodes\": dial tcp 10.200.20.29:6443: connect: connection refused" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:52.344450 kubelet[2137]: W1002 20:42:52.344372 2137 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.29:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:52.344450 kubelet[2137]: E1002 20:42:52.344430 2137 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.29:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:52.435140 kubelet[2137]: W1002 20:42:52.435086 2137 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.29:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:52.435140 kubelet[2137]: E1002 20:42:52.435142 2137 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.29:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:52.511927 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount746970774.mount: Deactivated successfully. Oct 2 20:42:52.546111 kubelet[2137]: E1002 20:42:52.546072 2137 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.29:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-5b3cc0a007?timeout=10s\": dial tcp 10.200.20.29:6443: connect: connection refused" interval="1.6s" Oct 2 20:42:52.554704 env[1384]: time="2023-10-02T20:42:52.554666820Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:52.559855 env[1384]: time="2023-10-02T20:42:52.559825001Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:52.578672 env[1384]: time="2023-10-02T20:42:52.578627213Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:52.583921 env[1384]: time="2023-10-02T20:42:52.583892074Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:52.588364 env[1384]: time="2023-10-02T20:42:52.588325338Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:52.591878 env[1384]: time="2023-10-02T20:42:52.591844685Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:52.601372 env[1384]: time="2023-10-02T20:42:52.601290171Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:52.606238 env[1384]: time="2023-10-02T20:42:52.606211153Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:52.610146 env[1384]: time="2023-10-02T20:42:52.610119739Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:52.622431 env[1384]: time="2023-10-02T20:42:52.622390735Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:52.628056 env[1384]: time="2023-10-02T20:42:52.628029994Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:52.638086 env[1384]: time="2023-10-02T20:42:52.638061318Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:42:52.669526 kubelet[2137]: W1002 20:42:52.669468 2137 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.29:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-5b3cc0a007&limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:52.669526 kubelet[2137]: E1002 20:42:52.669525 2137 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.29:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-5b3cc0a007&limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:52.687871 kubelet[2137]: I1002 20:42:52.687847 2137 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:52.688181 kubelet[2137]: E1002 20:42:52.688131 2137 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.29:6443/api/v1/nodes\": dial tcp 10.200.20.29:6443: connect: connection refused" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:52.710042 env[1384]: time="2023-10-02T20:42:52.709824578Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:42:52.710042 env[1384]: time="2023-10-02T20:42:52.709863178Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:42:52.710042 env[1384]: time="2023-10-02T20:42:52.709873378Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:42:52.710242 env[1384]: time="2023-10-02T20:42:52.710047177Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d9e698464f4b4b67e85e2a02d9513cd3163992b654558dbc3d5b2622353011b6 pid=2175 runtime=io.containerd.runc.v2 Oct 2 20:42:52.731561 systemd[1]: Started cri-containerd-d9e698464f4b4b67e85e2a02d9513cd3163992b654558dbc3d5b2622353011b6.scope. Oct 2 20:42:52.743870 env[1384]: time="2023-10-02T20:42:52.743718855Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:42:52.744093 env[1384]: time="2023-10-02T20:42:52.744068534Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:42:52.744317 env[1384]: time="2023-10-02T20:42:52.744290373Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:42:52.744787 env[1384]: time="2023-10-02T20:42:52.744754452Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/13c2b437d9302dd9d91869451961cb2725a67e465a111fd5c8286b5a36562384 pid=2199 runtime=io.containerd.runc.v2 Oct 2 20:42:52.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.749000 audit: BPF prog-id=68 op=LOAD Oct 2 20:42:52.749000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.749000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bfb38 a2=10 a3=0 items=0 ppid=2175 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439653639383436346634623462363765383565326130326439353133 Oct 2 20:42:52.750000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.750000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=2175 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439653639383436346634623462363765383565326130326439353133 Oct 2 20:42:52.750000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.750000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.750000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.750000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.750000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.750000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.750000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.750000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.750000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.750000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.750000 audit: BPF prog-id=69 op=LOAD Oct 2 20:42:52.750000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=2175 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439653639383436346634623462363765383565326130326439353133 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit: BPF prog-id=70 op=LOAD Oct 2 20:42:52.751000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=2175 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439653639383436346634623462363765383565326130326439353133 Oct 2 20:42:52.751000 audit: BPF prog-id=70 op=UNLOAD Oct 2 20:42:52.751000 audit: BPF prog-id=69 op=UNLOAD Oct 2 20:42:52.753418 kubelet[2137]: W1002 20:42:52.753338 2137 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.29:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:52.753418 kubelet[2137]: E1002 20:42:52.753395 2137 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.29:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.29:6443: connect: connection refused Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.751000 audit: BPF prog-id=71 op=LOAD Oct 2 20:42:52.751000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=2175 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439653639383436346634623462363765383565326130326439353133 Oct 2 20:42:52.759849 env[1384]: time="2023-10-02T20:42:52.759796197Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:42:52.759979 env[1384]: time="2023-10-02T20:42:52.759957797Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:42:52.760062 env[1384]: time="2023-10-02T20:42:52.760042396Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:42:52.760323 env[1384]: time="2023-10-02T20:42:52.760296315Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/07d9d7fd6f21363a801f0f698390dcb74bba9e805c68a381174a85da52d4972d pid=2225 runtime=io.containerd.runc.v2 Oct 2 20:42:52.771597 systemd[1]: Started cri-containerd-13c2b437d9302dd9d91869451961cb2725a67e465a111fd5c8286b5a36562384.scope. Oct 2 20:42:52.791158 env[1384]: time="2023-10-02T20:42:52.791098324Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-5b3cc0a007,Uid:b4c7dbf2e95236fe9186b8ba973ff2ee,Namespace:kube-system,Attempt:0,} returns sandbox id \"d9e698464f4b4b67e85e2a02d9513cd3163992b654558dbc3d5b2622353011b6\"" Oct 2 20:42:52.795301 env[1384]: time="2023-10-02T20:42:52.795258429Z" level=info msg="CreateContainer within sandbox \"d9e698464f4b4b67e85e2a02d9513cd3163992b654558dbc3d5b2622353011b6\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:42:52.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.794000 audit: BPF prog-id=72 op=LOAD Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2199 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133633262343337643933303264643964393138363934353139363163 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2199 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133633262343337643933303264643964393138363934353139363163 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit: BPF prog-id=73 op=LOAD Oct 2 20:42:52.795000 audit[2222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2199 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133633262343337643933303264643964393138363934353139363163 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit: BPF prog-id=74 op=LOAD Oct 2 20:42:52.795000 audit[2222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2199 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133633262343337643933303264643964393138363934353139363163 Oct 2 20:42:52.795000 audit: BPF prog-id=74 op=UNLOAD Oct 2 20:42:52.795000 audit: BPF prog-id=73 op=UNLOAD Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.795000 audit: BPF prog-id=75 op=LOAD Oct 2 20:42:52.795000 audit[2222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2199 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133633262343337643933303264643964393138363934353139363163 Oct 2 20:42:52.806974 systemd[1]: Started cri-containerd-07d9d7fd6f21363a801f0f698390dcb74bba9e805c68a381174a85da52d4972d.scope. Oct 2 20:42:52.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.830000 audit: BPF prog-id=76 op=LOAD Oct 2 20:42:52.831000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.831000 audit[2240]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2225 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037643964376664366632313336336138303166306636393833393064 Oct 2 20:42:52.831000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.831000 audit[2240]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2225 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037643964376664366632313336336138303166306636393833393064 Oct 2 20:42:52.831000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.831000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.831000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.831000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.831000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.831000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.831000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.831000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.831000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.831000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.831000 audit: BPF prog-id=77 op=LOAD Oct 2 20:42:52.831000 audit[2240]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2225 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037643964376664366632313336336138303166306636393833393064 Oct 2 20:42:52.832000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.832000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.832000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.832000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.832000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.832000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.832000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.832000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.832000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.832000 audit: BPF prog-id=78 op=LOAD Oct 2 20:42:52.832000 audit[2240]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2225 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037643964376664366632313336336138303166306636393833393064 Oct 2 20:42:52.833000 audit: BPF prog-id=78 op=UNLOAD Oct 2 20:42:52.833000 audit: BPF prog-id=77 op=UNLOAD Oct 2 20:42:52.833000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.833000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.833000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.833000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.833000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.833000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.833000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.833000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.833000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.833000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.833000 audit: BPF prog-id=79 op=LOAD Oct 2 20:42:52.833000 audit[2240]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2225 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037643964376664366632313336336138303166306636393833393064 Oct 2 20:42:52.842600 env[1384]: time="2023-10-02T20:42:52.842541338Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-5b3cc0a007,Uid:68bd69fa99b9c1aa7efc2da658e01f97,Namespace:kube-system,Attempt:0,} returns sandbox id \"13c2b437d9302dd9d91869451961cb2725a67e465a111fd5c8286b5a36562384\"" Oct 2 20:42:52.845976 env[1384]: time="2023-10-02T20:42:52.845945405Z" level=info msg="CreateContainer within sandbox \"13c2b437d9302dd9d91869451961cb2725a67e465a111fd5c8286b5a36562384\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:42:52.856706 env[1384]: time="2023-10-02T20:42:52.856599887Z" level=info msg="CreateContainer within sandbox \"d9e698464f4b4b67e85e2a02d9513cd3163992b654558dbc3d5b2622353011b6\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"61d3d0b4d3dafb65719130d563172c4550392aff11b6680f0d8e1fc9322fbaf0\"" Oct 2 20:42:52.859365 env[1384]: time="2023-10-02T20:42:52.859340317Z" level=info msg="StartContainer for \"61d3d0b4d3dafb65719130d563172c4550392aff11b6680f0d8e1fc9322fbaf0\"" Oct 2 20:42:52.869159 env[1384]: time="2023-10-02T20:42:52.869129921Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-5b3cc0a007,Uid:b8d3065fcb35173868035a1ee46bf22e,Namespace:kube-system,Attempt:0,} returns sandbox id \"07d9d7fd6f21363a801f0f698390dcb74bba9e805c68a381174a85da52d4972d\"" Oct 2 20:42:52.871798 env[1384]: time="2023-10-02T20:42:52.871771272Z" level=info msg="CreateContainer within sandbox \"07d9d7fd6f21363a801f0f698390dcb74bba9e805c68a381174a85da52d4972d\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:42:52.885349 systemd[1]: Started cri-containerd-61d3d0b4d3dafb65719130d563172c4550392aff11b6680f0d8e1fc9322fbaf0.scope. Oct 2 20:42:52.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.901000 audit: BPF prog-id=80 op=LOAD Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2175 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631643364306234643364616662363537313931333064353633313732 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2175 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631643364306234643364616662363537313931333064353633313732 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit: BPF prog-id=81 op=LOAD Oct 2 20:42:52.902000 audit[2295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2175 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631643364306234643364616662363537313931333064353633313732 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit: BPF prog-id=82 op=LOAD Oct 2 20:42:52.902000 audit[2295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2175 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631643364306234643364616662363537313931333064353633313732 Oct 2 20:42:52.902000 audit: BPF prog-id=82 op=UNLOAD Oct 2 20:42:52.902000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.902000 audit: BPF prog-id=83 op=LOAD Oct 2 20:42:52.902000 audit[2295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2175 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631643364306234643364616662363537313931333064353633313732 Oct 2 20:42:52.911922 env[1384]: time="2023-10-02T20:42:52.911865207Z" level=info msg="CreateContainer within sandbox \"13c2b437d9302dd9d91869451961cb2725a67e465a111fd5c8286b5a36562384\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"3b90fdc0c1cf7333bc64ec7cc453eb4b437a4d26aec318363682daaedefa3c0e\"" Oct 2 20:42:52.913892 env[1384]: time="2023-10-02T20:42:52.913840639Z" level=info msg="StartContainer for \"3b90fdc0c1cf7333bc64ec7cc453eb4b437a4d26aec318363682daaedefa3c0e\"" Oct 2 20:42:52.939522 systemd[1]: Started cri-containerd-3b90fdc0c1cf7333bc64ec7cc453eb4b437a4d26aec318363682daaedefa3c0e.scope. Oct 2 20:42:52.960230 env[1384]: time="2023-10-02T20:42:52.960155752Z" level=info msg="StartContainer for \"61d3d0b4d3dafb65719130d563172c4550392aff11b6680f0d8e1fc9322fbaf0\" returns successfully" Oct 2 20:42:52.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.963000 audit: BPF prog-id=84 op=LOAD Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2199 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362393066646330633163663733333362633634656337636334353365 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2199 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362393066646330633163663733333362633634656337636334353365 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit: BPF prog-id=85 op=LOAD Oct 2 20:42:52.964000 audit[2328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2199 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362393066646330633163663733333362633634656337636334353365 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit: BPF prog-id=86 op=LOAD Oct 2 20:42:52.964000 audit[2328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2199 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362393066646330633163663733333362633634656337636334353365 Oct 2 20:42:52.964000 audit: BPF prog-id=86 op=UNLOAD Oct 2 20:42:52.964000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:52.964000 audit: BPF prog-id=87 op=LOAD Oct 2 20:42:52.964000 audit[2328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2199 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362393066646330633163663733333362633634656337636334353365 Oct 2 20:42:53.006153 env[1384]: time="2023-10-02T20:42:53.006101426Z" level=info msg="CreateContainer within sandbox \"07d9d7fd6f21363a801f0f698390dcb74bba9e805c68a381174a85da52d4972d\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"acdb3fdd9ab06c08aba8724cb361f75961cfa88a173b104a3859d622db72adf1\"" Oct 2 20:42:53.006788 env[1384]: time="2023-10-02T20:42:53.006744303Z" level=info msg="StartContainer for \"acdb3fdd9ab06c08aba8724cb361f75961cfa88a173b104a3859d622db72adf1\"" Oct 2 20:42:53.012952 env[1384]: time="2023-10-02T20:42:53.012904362Z" level=info msg="StartContainer for \"3b90fdc0c1cf7333bc64ec7cc453eb4b437a4d26aec318363682daaedefa3c0e\" returns successfully" Oct 2 20:42:53.040128 systemd[1]: Started cri-containerd-acdb3fdd9ab06c08aba8724cb361f75961cfa88a173b104a3859d622db72adf1.scope. Oct 2 20:42:53.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit: BPF prog-id=88 op=LOAD Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2225 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:53.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163646233666464396162303663303861626138373234636233363166 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2225 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:53.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163646233666464396162303663303861626138373234636233363166 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit: BPF prog-id=89 op=LOAD Oct 2 20:42:53.066000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2225 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:53.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163646233666464396162303663303861626138373234636233363166 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit: BPF prog-id=90 op=LOAD Oct 2 20:42:53.066000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2225 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:53.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163646233666464396162303663303861626138373234636233363166 Oct 2 20:42:53.066000 audit: BPF prog-id=90 op=UNLOAD Oct 2 20:42:53.066000 audit: BPF prog-id=89 op=UNLOAD Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:53.066000 audit: BPF prog-id=91 op=LOAD Oct 2 20:42:53.066000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2225 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:53.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163646233666464396162303663303861626138373234636233363166 Oct 2 20:42:53.099202 env[1384]: time="2023-10-02T20:42:53.099139017Z" level=info msg="StartContainer for \"acdb3fdd9ab06c08aba8724cb361f75961cfa88a173b104a3859d622db72adf1\" returns successfully" Oct 2 20:42:54.289819 kubelet[2137]: I1002 20:42:54.289796 2137 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:54.808651 kernel: kauditd_printk_skb: 557 callbacks suppressed Oct 2 20:42:54.808798 kernel: audit: type=1400 audit(1696279374.780:695): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:54.780000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:54.780000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40002b8bd0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:42:54.846517 kernel: audit: type=1300 audit(1696279374.780:695): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40002b8bd0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:42:54.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:54.877445 kernel: audit: type=1327 audit(1696279374.780:695): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:54.780000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:54.900344 kernel: audit: type=1400 audit(1696279374.780:696): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:54.780000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000492040 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:42:54.928779 kernel: audit: type=1300 audit(1696279374.780:696): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000492040 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:42:54.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:54.953693 kernel: audit: type=1327 audit(1696279374.780:696): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:55.155000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:55.155000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003a30000 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:42:55.219143 kernel: audit: type=1400 audit(1696279375.155:697): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:55.219252 kernel: audit: type=1300 audit(1696279375.155:697): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003a30000 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:42:55.155000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:42:55.242638 kernel: audit: type=1327 audit(1696279375.155:697): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:42:55.179000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:55.179000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4007314100 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:42:55.179000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:42:55.181000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:55.181000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003a30150 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:42:55.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:42:55.181000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:55.181000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4b a1=4003a301e0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:42:55.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:42:55.184000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:55.184000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400b5eec20 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:42:55.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:42:55.184000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:55.184000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4003b9d590 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:42:55.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:42:55.271207 kernel: audit: type=1400 audit(1696279375.179:698): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:55.521120 kubelet[2137]: E1002 20:42:55.521022 2137 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-5b3cc0a007\" not found" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:55.557153 kubelet[2137]: I1002 20:42:55.557126 2137 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:55.621367 kubelet[2137]: E1002 20:42:55.621246 2137 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-5b3cc0a007.178a6519cc49e77d", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-5b3cc0a007", UID:"ci-3510.3.0-a-5b3cc0a007", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-5b3cc0a007"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 42, 51, 134396285, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 42, 51, 134396285, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 20:42:56.139511 kubelet[2137]: I1002 20:42:56.139473 2137 apiserver.go:52] "Watching apiserver" Oct 2 20:42:56.142768 kubelet[2137]: I1002 20:42:56.142736 2137 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 20:42:56.185721 kubelet[2137]: I1002 20:42:56.185682 2137 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:42:58.768867 systemd[1]: Reloading. Oct 2 20:42:58.864989 /usr/lib/systemd/system-generators/torcx-generator[2420]: time="2023-10-02T20:42:58Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:42:58.865017 /usr/lib/systemd/system-generators/torcx-generator[2420]: time="2023-10-02T20:42:58Z" level=info msg="torcx already run" Oct 2 20:42:58.951645 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:42:58.951662 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:42:58.966703 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit: BPF prog-id=92 op=LOAD Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.040000 audit: BPF prog-id=93 op=LOAD Oct 2 20:42:59.040000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:42:59.040000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:42:59.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit: BPF prog-id=94 op=LOAD Oct 2 20:42:59.042000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit: BPF prog-id=95 op=LOAD Oct 2 20:42:59.042000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit: BPF prog-id=96 op=LOAD Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.042000 audit: BPF prog-id=97 op=LOAD Oct 2 20:42:59.042000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:42:59.042000 audit: BPF prog-id=58 op=UNLOAD Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit: BPF prog-id=98 op=LOAD Oct 2 20:42:59.044000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.044000 audit: BPF prog-id=99 op=LOAD Oct 2 20:42:59.044000 audit: BPF prog-id=84 op=UNLOAD Oct 2 20:42:59.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.045000 audit: BPF prog-id=100 op=LOAD Oct 2 20:42:59.045000 audit: BPF prog-id=80 op=UNLOAD Oct 2 20:42:59.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.046000 audit: BPF prog-id=101 op=LOAD Oct 2 20:42:59.047000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit: BPF prog-id=102 op=LOAD Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.047000 audit: BPF prog-id=103 op=LOAD Oct 2 20:42:59.047000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:42:59.047000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit: BPF prog-id=104 op=LOAD Oct 2 20:42:59.048000 audit: BPF prog-id=76 op=UNLOAD Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit: BPF prog-id=105 op=LOAD Oct 2 20:42:59.048000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit: BPF prog-id=106 op=LOAD Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.048000 audit: BPF prog-id=107 op=LOAD Oct 2 20:42:59.048000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:42:59.048000 audit: BPF prog-id=65 op=UNLOAD Oct 2 20:42:59.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.049000 audit: BPF prog-id=108 op=LOAD Oct 2 20:42:59.049000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit: BPF prog-id=109 op=LOAD Oct 2 20:42:59.050000 audit: BPF prog-id=68 op=UNLOAD Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.051000 audit: BPF prog-id=110 op=LOAD Oct 2 20:42:59.051000 audit: BPF prog-id=88 op=UNLOAD Oct 2 20:42:59.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.051000 audit: BPF prog-id=111 op=LOAD Oct 2 20:42:59.051000 audit: BPF prog-id=72 op=UNLOAD Oct 2 20:42:59.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.053000 audit: BPF prog-id=112 op=LOAD Oct 2 20:42:59.053000 audit: BPF prog-id=67 op=UNLOAD Oct 2 20:42:59.074596 systemd[1]: Stopping kubelet.service... Oct 2 20:42:59.092559 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:42:59.092772 systemd[1]: Stopped kubelet.service. Oct 2 20:42:59.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:59.092828 systemd[1]: kubelet.service: Consumed 1.268s CPU time. Oct 2 20:42:59.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:59.095281 systemd[1]: Started kubelet.service. Oct 2 20:42:59.169173 kubelet[2480]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:42:59.169173 kubelet[2480]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:42:59.169173 kubelet[2480]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:42:59.169510 kubelet[2480]: I1002 20:42:59.169286 2480 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:42:59.175119 kubelet[2480]: I1002 20:42:59.175097 2480 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 20:42:59.175254 kubelet[2480]: I1002 20:42:59.175243 2480 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:42:59.175506 kubelet[2480]: I1002 20:42:59.175492 2480 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 20:42:59.176978 kubelet[2480]: I1002 20:42:59.176961 2480 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:42:59.179936 kubelet[2480]: I1002 20:42:59.179903 2480 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:42:59.180837 kubelet[2480]: W1002 20:42:59.180824 2480 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:42:59.181596 kubelet[2480]: I1002 20:42:59.181581 2480 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:42:59.181855 kubelet[2480]: I1002 20:42:59.181844 2480 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:42:59.181985 kubelet[2480]: I1002 20:42:59.181975 2480 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:42:59.182143 kubelet[2480]: I1002 20:42:59.182133 2480 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:42:59.182222 kubelet[2480]: I1002 20:42:59.182214 2480 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 20:42:59.182364 kubelet[2480]: I1002 20:42:59.182354 2480 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:42:59.188754 kubelet[2480]: I1002 20:42:59.188735 2480 kubelet.go:405] "Attempting to sync node with API server" Oct 2 20:42:59.189540 kubelet[2480]: I1002 20:42:59.189523 2480 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:42:59.189842 kubelet[2480]: I1002 20:42:59.189828 2480 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:42:59.189952 kubelet[2480]: I1002 20:42:59.189941 2480 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:42:59.191094 kubelet[2480]: I1002 20:42:59.191063 2480 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:42:59.191765 kubelet[2480]: I1002 20:42:59.191738 2480 server.go:1168] "Started kubelet" Oct 2 20:42:59.193000 audit[2480]: AVC avc: denied { mac_admin } for pid=2480 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.193000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:42:59.193000 audit[2480]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a45620 a1=4000589608 a2=4000a455f0 a3=25 items=0 ppid=1 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:59.193000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:42:59.193000 audit[2480]: AVC avc: denied { mac_admin } for pid=2480 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.193000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:42:59.193000 audit[2480]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a78900 a1=4000589620 a2=4000a456b0 a3=25 items=0 ppid=1 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:59.193000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:42:59.197678 kubelet[2480]: I1002 20:42:59.194288 2480 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:42:59.197678 kubelet[2480]: I1002 20:42:59.194341 2480 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:42:59.197678 kubelet[2480]: I1002 20:42:59.194398 2480 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:42:59.208217 kubelet[2480]: I1002 20:42:59.208184 2480 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:42:59.208908 kubelet[2480]: I1002 20:42:59.208877 2480 server.go:461] "Adding debug handlers to kubelet server" Oct 2 20:42:59.209831 kubelet[2480]: I1002 20:42:59.209786 2480 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:42:59.216124 kubelet[2480]: I1002 20:42:59.216101 2480 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 20:42:59.218269 kubelet[2480]: I1002 20:42:59.218251 2480 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 20:42:59.219917 kubelet[2480]: E1002 20:42:59.219901 2480 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:42:59.220031 kubelet[2480]: E1002 20:42:59.220021 2480 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:42:59.226357 kubelet[2480]: I1002 20:42:59.226271 2480 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:42:59.227888 kubelet[2480]: I1002 20:42:59.227661 2480 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:42:59.227888 kubelet[2480]: I1002 20:42:59.227716 2480 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 20:42:59.227888 kubelet[2480]: I1002 20:42:59.227735 2480 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 20:42:59.227888 kubelet[2480]: E1002 20:42:59.227777 2480 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:42:59.307069 kubelet[2480]: I1002 20:42:59.303684 2480 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:42:59.307069 kubelet[2480]: I1002 20:42:59.303726 2480 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:42:59.307069 kubelet[2480]: I1002 20:42:59.303745 2480 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:42:59.307069 kubelet[2480]: I1002 20:42:59.304009 2480 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:42:59.307069 kubelet[2480]: I1002 20:42:59.304027 2480 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 20:42:59.307069 kubelet[2480]: I1002 20:42:59.304033 2480 policy_none.go:49] "None policy: Start" Oct 2 20:42:59.307802 kubelet[2480]: I1002 20:42:59.307785 2480 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:42:59.307893 kubelet[2480]: I1002 20:42:59.307884 2480 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:42:59.308075 kubelet[2480]: I1002 20:42:59.308064 2480 state_mem.go:75] "Updated machine memory state" Oct 2 20:42:59.313301 kubelet[2480]: I1002 20:42:59.313286 2480 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:42:59.312000 audit[2480]: AVC avc: denied { mac_admin } for pid=2480 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:42:59.312000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:42:59.312000 audit[2480]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000dc6b40 a1=4000da4858 a2=4000dc6b10 a3=25 items=0 ppid=1 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:59.312000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:42:59.314009 kubelet[2480]: I1002 20:42:59.313996 2480 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:42:59.314842 kubelet[2480]: I1002 20:42:59.314828 2480 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:42:59.322307 kubelet[2480]: I1002 20:42:59.322289 2480 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:59.330273 kubelet[2480]: I1002 20:42:59.330244 2480 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:42:59.330359 kubelet[2480]: I1002 20:42:59.330327 2480 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:42:59.330390 kubelet[2480]: I1002 20:42:59.330362 2480 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:42:59.346000 audit[2510]: USER_ACCT pid=2510 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:59.347495 sudo[2510]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:42:59.346000 audit[2510]: CRED_REFR pid=2510 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:59.347982 sudo[2510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:42:59.348000 audit[2510]: USER_START pid=2510 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:59.391644 kubelet[2480]: W1002 20:42:59.391598 2480 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:42:59.397326 kubelet[2480]: W1002 20:42:59.397309 2480 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:42:59.397510 kubelet[2480]: W1002 20:42:59.397500 2480 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:42:59.397832 kubelet[2480]: I1002 20:42:59.397817 2480 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:59.397961 kubelet[2480]: I1002 20:42:59.397951 2480 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:59.419609 kubelet[2480]: I1002 20:42:59.419565 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b4c7dbf2e95236fe9186b8ba973ff2ee-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b4c7dbf2e95236fe9186b8ba973ff2ee\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:59.419609 kubelet[2480]: I1002 20:42:59.419618 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b8d3065fcb35173868035a1ee46bf22e-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b8d3065fcb35173868035a1ee46bf22e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:59.419766 kubelet[2480]: I1002 20:42:59.419640 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b8d3065fcb35173868035a1ee46bf22e-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b8d3065fcb35173868035a1ee46bf22e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:59.419766 kubelet[2480]: I1002 20:42:59.419668 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b8d3065fcb35173868035a1ee46bf22e-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b8d3065fcb35173868035a1ee46bf22e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:59.419766 kubelet[2480]: I1002 20:42:59.419690 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/68bd69fa99b9c1aa7efc2da658e01f97-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-5b3cc0a007\" (UID: \"68bd69fa99b9c1aa7efc2da658e01f97\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:59.419766 kubelet[2480]: I1002 20:42:59.419710 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b4c7dbf2e95236fe9186b8ba973ff2ee-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b4c7dbf2e95236fe9186b8ba973ff2ee\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:59.419766 kubelet[2480]: I1002 20:42:59.419739 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b4c7dbf2e95236fe9186b8ba973ff2ee-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b4c7dbf2e95236fe9186b8ba973ff2ee\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:59.419881 kubelet[2480]: I1002 20:42:59.419761 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b8d3065fcb35173868035a1ee46bf22e-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b8d3065fcb35173868035a1ee46bf22e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:59.419881 kubelet[2480]: I1002 20:42:59.419783 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b8d3065fcb35173868035a1ee46bf22e-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-5b3cc0a007\" (UID: \"b8d3065fcb35173868035a1ee46bf22e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:42:59.864636 sudo[2510]: pam_unix(sudo:session): session closed for user root Oct 2 20:42:59.876846 kernel: kauditd_printk_skb: 275 callbacks suppressed Oct 2 20:42:59.876937 kernel: audit: type=1106 audit(1696279379.863:955): pid=2510 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:59.863000 audit[2510]: USER_END pid=2510 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:59.868000 audit[2510]: CRED_DISP pid=2510 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:42:59.909793 kernel: audit: type=1104 audit(1696279379.868:956): pid=2510 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:43:00.201127 kubelet[2480]: I1002 20:43:00.201022 2480 apiserver.go:52] "Watching apiserver" Oct 2 20:43:00.218706 kubelet[2480]: I1002 20:43:00.218670 2480 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 20:43:00.225031 kubelet[2480]: I1002 20:43:00.225014 2480 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:43:00.282447 kubelet[2480]: W1002 20:43:00.282424 2480 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:43:00.282650 kubelet[2480]: E1002 20:43:00.282637 2480 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-5b3cc0a007\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-5b3cc0a007" Oct 2 20:43:00.351969 kubelet[2480]: I1002 20:43:00.351942 2480 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-5b3cc0a007" podStartSLOduration=1.35190431 podCreationTimestamp="2023-10-02 20:42:59 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:43:00.333899884 +0000 UTC m=+1.227458768" watchObservedRunningTime="2023-10-02 20:43:00.35190431 +0000 UTC m=+1.245463154" Oct 2 20:43:00.352233 kubelet[2480]: I1002 20:43:00.352221 2480 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-5b3cc0a007" podStartSLOduration=1.35220051 podCreationTimestamp="2023-10-02 20:42:59 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:43:00.351662231 +0000 UTC m=+1.245221115" watchObservedRunningTime="2023-10-02 20:43:00.35220051 +0000 UTC m=+1.245759394" Oct 2 20:43:00.385494 kubelet[2480]: I1002 20:43:00.385466 2480 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-5b3cc0a007" podStartSLOduration=1.385415611 podCreationTimestamp="2023-10-02 20:42:59 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:43:00.383608176 +0000 UTC m=+1.277167060" watchObservedRunningTime="2023-10-02 20:43:00.385415611 +0000 UTC m=+1.278974495" Oct 2 20:43:01.564079 sudo[1725]: pam_unix(sudo:session): session closed for user root Oct 2 20:43:01.563000 audit[1725]: USER_END pid=1725 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:43:01.563000 audit[1725]: CRED_DISP pid=1725 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:43:01.605647 kernel: audit: type=1106 audit(1696279381.563:957): pid=1725 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:43:01.605714 kernel: audit: type=1104 audit(1696279381.563:958): pid=1725 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:43:01.653294 sshd[1722]: pam_unix(sshd:session): session closed for user core Oct 2 20:43:01.653000 audit[1722]: USER_END pid=1722 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:01.679474 systemd[1]: sshd@6-10.200.20.29:22-10.200.12.6:45578.service: Deactivated successfully. Oct 2 20:43:01.653000 audit[1722]: CRED_DISP pid=1722 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:01.680257 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:43:01.680432 systemd[1]: session-9.scope: Consumed 7.855s CPU time. Oct 2 20:43:01.701657 kernel: audit: type=1106 audit(1696279381.653:959): pid=1722 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:01.701747 kernel: audit: type=1104 audit(1696279381.653:960): pid=1722 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:01.701769 systemd-logind[1364]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:43:01.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.29:22-10.200.12.6:45578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:01.724198 kernel: audit: type=1131 audit(1696279381.678:961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.29:22-10.200.12.6:45578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:01.724214 systemd-logind[1364]: Removed session 9. Oct 2 20:43:11.758000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:11.758000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000493b40 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:43:11.809305 kernel: audit: type=1400 audit(1696279391.758:962): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:11.809437 kernel: audit: type=1300 audit(1696279391.758:962): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000493b40 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:43:11.809467 kernel: audit: type=1327 audit(1696279391.758:962): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:11.758000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:11.761000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:11.854925 kernel: audit: type=1400 audit(1696279391.761:963): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:11.761000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000fbf1e0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:43:11.884435 kernel: audit: type=1300 audit(1696279391.761:963): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000fbf1e0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:43:11.884582 kernel: audit: type=1327 audit(1696279391.761:963): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:11.761000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:11.761000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:11.930587 kernel: audit: type=1400 audit(1696279391.761:964): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:11.930721 kernel: audit: type=1300 audit(1696279391.761:964): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000fbf220 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:43:11.761000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000fbf220 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:43:11.761000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:11.984863 kernel: audit: type=1327 audit(1696279391.761:964): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:11.985184 kernel: audit: type=1400 audit(1696279391.761:965): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:11.761000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:11.761000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000fbf260 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:43:11.761000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:12.106000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:43:12.106000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400104a200 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:43:12.106000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:12.569233 kubelet[2480]: I1002 20:43:12.569200 2480 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:43:12.569849 env[1384]: time="2023-10-02T20:43:12.569818940Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:43:12.570306 kubelet[2480]: I1002 20:43:12.570282 2480 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:43:13.175573 kubelet[2480]: I1002 20:43:13.175542 2480 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:43:13.180279 systemd[1]: Created slice kubepods-besteffort-podd1faa03f_1f1e_4a5f_99ed_d75c36ace08c.slice. Oct 2 20:43:13.193612 kubelet[2480]: I1002 20:43:13.193581 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d1faa03f-1f1e-4a5f-99ed-d75c36ace08c-xtables-lock\") pod \"kube-proxy-qvw4r\" (UID: \"d1faa03f-1f1e-4a5f-99ed-d75c36ace08c\") " pod="kube-system/kube-proxy-qvw4r" Oct 2 20:43:13.193805 kubelet[2480]: I1002 20:43:13.193794 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d1faa03f-1f1e-4a5f-99ed-d75c36ace08c-lib-modules\") pod \"kube-proxy-qvw4r\" (UID: \"d1faa03f-1f1e-4a5f-99ed-d75c36ace08c\") " pod="kube-system/kube-proxy-qvw4r" Oct 2 20:43:13.193891 kubelet[2480]: I1002 20:43:13.193882 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kvqnt\" (UniqueName: \"kubernetes.io/projected/d1faa03f-1f1e-4a5f-99ed-d75c36ace08c-kube-api-access-kvqnt\") pod \"kube-proxy-qvw4r\" (UID: \"d1faa03f-1f1e-4a5f-99ed-d75c36ace08c\") " pod="kube-system/kube-proxy-qvw4r" Oct 2 20:43:13.193983 kubelet[2480]: I1002 20:43:13.193974 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/d1faa03f-1f1e-4a5f-99ed-d75c36ace08c-kube-proxy\") pod \"kube-proxy-qvw4r\" (UID: \"d1faa03f-1f1e-4a5f-99ed-d75c36ace08c\") " pod="kube-system/kube-proxy-qvw4r" Oct 2 20:43:13.198598 kubelet[2480]: I1002 20:43:13.198553 2480 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:43:13.203466 systemd[1]: Created slice kubepods-burstable-pod5db1c46f_8948_4fc2_b38e_819dab56fed0.slice. Oct 2 20:43:13.294494 kubelet[2480]: I1002 20:43:13.294466 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-cilium-cgroup\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.294674 kubelet[2480]: I1002 20:43:13.294663 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-xtables-lock\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.294748 kubelet[2480]: I1002 20:43:13.294739 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/5db1c46f-8948-4fc2-b38e-819dab56fed0-hubble-tls\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.294835 kubelet[2480]: I1002 20:43:13.294826 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-cni-path\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.294921 kubelet[2480]: I1002 20:43:13.294911 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-etc-cni-netd\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.294994 kubelet[2480]: I1002 20:43:13.294985 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-host-proc-sys-net\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.295069 kubelet[2480]: I1002 20:43:13.295060 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-cilium-run\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.295143 kubelet[2480]: I1002 20:43:13.295126 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-lib-modules\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.295239 kubelet[2480]: I1002 20:43:13.295229 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/5db1c46f-8948-4fc2-b38e-819dab56fed0-clustermesh-secrets\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.295310 kubelet[2480]: I1002 20:43:13.295301 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-hostproc\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.295406 kubelet[2480]: I1002 20:43:13.295396 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-host-proc-sys-kernel\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.295480 kubelet[2480]: I1002 20:43:13.295470 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-68l7k\" (UniqueName: \"kubernetes.io/projected/5db1c46f-8948-4fc2-b38e-819dab56fed0-kube-api-access-68l7k\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.295554 kubelet[2480]: I1002 20:43:13.295546 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-bpf-maps\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.295620 kubelet[2480]: I1002 20:43:13.295613 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5db1c46f-8948-4fc2-b38e-819dab56fed0-cilium-config-path\") pod \"cilium-f7vv8\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " pod="kube-system/cilium-f7vv8" Oct 2 20:43:13.474743 kubelet[2480]: I1002 20:43:13.474628 2480 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:43:13.479903 systemd[1]: Created slice kubepods-besteffort-pod459c2c8f_fc43_42f0_bff4_95ff5c1b0120.slice. Oct 2 20:43:13.487445 env[1384]: time="2023-10-02T20:43:13.486996929Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-qvw4r,Uid:d1faa03f-1f1e-4a5f-99ed-d75c36ace08c,Namespace:kube-system,Attempt:0,}" Oct 2 20:43:13.497354 kubelet[2480]: I1002 20:43:13.497308 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/459c2c8f-fc43-42f0-bff4-95ff5c1b0120-cilium-config-path\") pod \"cilium-operator-574c4bb98d-rlxgd\" (UID: \"459c2c8f-fc43-42f0-bff4-95ff5c1b0120\") " pod="kube-system/cilium-operator-574c4bb98d-rlxgd" Oct 2 20:43:13.497354 kubelet[2480]: I1002 20:43:13.497361 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c6l2r\" (UniqueName: \"kubernetes.io/projected/459c2c8f-fc43-42f0-bff4-95ff5c1b0120-kube-api-access-c6l2r\") pod \"cilium-operator-574c4bb98d-rlxgd\" (UID: \"459c2c8f-fc43-42f0-bff4-95ff5c1b0120\") " pod="kube-system/cilium-operator-574c4bb98d-rlxgd" Oct 2 20:43:13.507669 env[1384]: time="2023-10-02T20:43:13.507631363Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-f7vv8,Uid:5db1c46f-8948-4fc2-b38e-819dab56fed0,Namespace:kube-system,Attempt:0,}" Oct 2 20:43:13.537107 env[1384]: time="2023-10-02T20:43:13.535304342Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:43:13.537107 env[1384]: time="2023-10-02T20:43:13.535358342Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:43:13.537107 env[1384]: time="2023-10-02T20:43:13.535371142Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:43:13.537107 env[1384]: time="2023-10-02T20:43:13.535612181Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9a3c8247f07df191dc1ed463ce4d9abf673510af277998e37d5ebb0f119ad3a2 pid=2558 runtime=io.containerd.runc.v2 Oct 2 20:43:13.552355 systemd[1]: Started cri-containerd-9a3c8247f07df191dc1ed463ce4d9abf673510af277998e37d5ebb0f119ad3a2.scope. Oct 2 20:43:13.570726 env[1384]: time="2023-10-02T20:43:13.570636384Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:43:13.570726 env[1384]: time="2023-10-02T20:43:13.570678824Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:43:13.570726 env[1384]: time="2023-10-02T20:43:13.570700424Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:43:13.571383 env[1384]: time="2023-10-02T20:43:13.571276783Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446 pid=2588 runtime=io.containerd.runc.v2 Oct 2 20:43:13.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.581000 audit: BPF prog-id=113 op=LOAD Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2558 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961336338323437663037646631393164633165643436336365346439 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2558 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961336338323437663037646631393164633165643436336365346439 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit: BPF prog-id=114 op=LOAD Oct 2 20:43:13.582000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2558 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961336338323437663037646631393164633165643436336365346439 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit: BPF prog-id=115 op=LOAD Oct 2 20:43:13.582000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2558 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961336338323437663037646631393164633165643436336365346439 Oct 2 20:43:13.582000 audit: BPF prog-id=115 op=UNLOAD Oct 2 20:43:13.582000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { perfmon } for pid=2569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit[2569]: AVC avc: denied { bpf } for pid=2569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.582000 audit: BPF prog-id=116 op=LOAD Oct 2 20:43:13.582000 audit[2569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2558 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961336338323437663037646631393164633165643436336365346439 Oct 2 20:43:13.594157 systemd[1]: Started cri-containerd-6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446.scope. Oct 2 20:43:13.621254 env[1384]: time="2023-10-02T20:43:13.621213592Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-qvw4r,Uid:d1faa03f-1f1e-4a5f-99ed-d75c36ace08c,Namespace:kube-system,Attempt:0,} returns sandbox id \"9a3c8247f07df191dc1ed463ce4d9abf673510af277998e37d5ebb0f119ad3a2\"" Oct 2 20:43:13.626016 env[1384]: time="2023-10-02T20:43:13.625913822Z" level=info msg="CreateContainer within sandbox \"9a3c8247f07df191dc1ed463ce4d9abf673510af277998e37d5ebb0f119ad3a2\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:43:13.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.626000 audit: BPF prog-id=117 op=LOAD Oct 2 20:43:13.626000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.626000 audit[2604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2588 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634333439343338353062643062633862306463373939623461663232 Oct 2 20:43:13.627000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.627000 audit[2604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2588 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634333439343338353062643062633862306463373939623461663232 Oct 2 20:43:13.627000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.627000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.627000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.627000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.627000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.627000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.627000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.627000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.627000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.627000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.627000 audit: BPF prog-id=118 op=LOAD Oct 2 20:43:13.627000 audit[2604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2588 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634333439343338353062643062633862306463373939623461663232 Oct 2 20:43:13.632000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.632000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.632000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.632000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.632000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.632000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.632000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.632000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.632000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.632000 audit: BPF prog-id=119 op=LOAD Oct 2 20:43:13.632000 audit[2604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2588 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634333439343338353062643062633862306463373939623461663232 Oct 2 20:43:13.633000 audit: BPF prog-id=119 op=UNLOAD Oct 2 20:43:13.633000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:43:13.633000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.633000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.633000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.633000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.633000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.633000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.633000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.633000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.633000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.633000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.633000 audit: BPF prog-id=120 op=LOAD Oct 2 20:43:13.633000 audit[2604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2588 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634333439343338353062643062633862306463373939623461663232 Oct 2 20:43:13.652914 env[1384]: time="2023-10-02T20:43:13.652868642Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-f7vv8,Uid:5db1c46f-8948-4fc2-b38e-819dab56fed0,Namespace:kube-system,Attempt:0,} returns sandbox id \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\"" Oct 2 20:43:13.656468 env[1384]: time="2023-10-02T20:43:13.656423154Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:43:13.692681 env[1384]: time="2023-10-02T20:43:13.692637434Z" level=info msg="CreateContainer within sandbox \"9a3c8247f07df191dc1ed463ce4d9abf673510af277998e37d5ebb0f119ad3a2\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"2e72e34ad18f67c3163b5ed0eced3906349233260c31c029c1fec96105b9718a\"" Oct 2 20:43:13.694808 env[1384]: time="2023-10-02T20:43:13.693509672Z" level=info msg="StartContainer for \"2e72e34ad18f67c3163b5ed0eced3906349233260c31c029c1fec96105b9718a\"" Oct 2 20:43:13.716034 systemd[1]: Started cri-containerd-2e72e34ad18f67c3163b5ed0eced3906349233260c31c029c1fec96105b9718a.scope. Oct 2 20:43:13.735000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.735000 audit[2641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=2558 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265373265333461643138663637633331363362356564306563656433 Oct 2 20:43:13.735000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.735000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.735000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.735000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.735000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.735000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.735000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.735000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.735000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.735000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.735000 audit: BPF prog-id=121 op=LOAD Oct 2 20:43:13.735000 audit[2641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=2558 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265373265333461643138663637633331363362356564306563656433 Oct 2 20:43:13.739000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.739000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.739000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.739000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.739000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.739000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.739000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.739000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.739000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.739000 audit: BPF prog-id=122 op=LOAD Oct 2 20:43:13.739000 audit[2641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=2558 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265373265333461643138663637633331363362356564306563656433 Oct 2 20:43:13.739000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:43:13.739000 audit: BPF prog-id=121 op=UNLOAD Oct 2 20:43:13.740000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.740000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.740000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.740000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.740000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.740000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.740000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.740000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.740000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.740000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.740000 audit: BPF prog-id=123 op=LOAD Oct 2 20:43:13.740000 audit[2641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=2558 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265373265333461643138663637633331363362356564306563656433 Oct 2 20:43:13.761338 env[1384]: time="2023-10-02T20:43:13.761240682Z" level=info msg="StartContainer for \"2e72e34ad18f67c3163b5ed0eced3906349233260c31c029c1fec96105b9718a\" returns successfully" Oct 2 20:43:13.782792 env[1384]: time="2023-10-02T20:43:13.782735755Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-rlxgd,Uid:459c2c8f-fc43-42f0-bff4-95ff5c1b0120,Namespace:kube-system,Attempt:0,}" Oct 2 20:43:13.838000 audit[2700]: NETFILTER_CFG table=mangle:44 family=2 entries=1 op=nft_register_chain pid=2700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.838000 audit[2700]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd3149ca0 a2=0 a3=ffff8e1b76c0 items=0 ppid=2650 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.838000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:43:13.843000 audit[2701]: NETFILTER_CFG table=mangle:45 family=10 entries=1 op=nft_register_chain pid=2701 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:13.843000 audit[2701]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff4c0ba30 a2=0 a3=ffffac8ef6c0 items=0 ppid=2650 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.843000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:43:13.846764 env[1384]: time="2023-10-02T20:43:13.846701453Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:43:13.846915 env[1384]: time="2023-10-02T20:43:13.846892213Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:43:13.847021 env[1384]: time="2023-10-02T20:43:13.847000972Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:43:13.847532 env[1384]: time="2023-10-02T20:43:13.847429851Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3 pid=2693 runtime=io.containerd.runc.v2 Oct 2 20:43:13.848000 audit[2703]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_chain pid=2703 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:13.848000 audit[2703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcea93790 a2=0 a3=ffffa35d76c0 items=0 ppid=2650 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.848000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:43:13.849000 audit[2702]: NETFILTER_CFG table=nat:47 family=2 entries=1 op=nft_register_chain pid=2702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.849000 audit[2702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcd1813a0 a2=0 a3=ffff915106c0 items=0 ppid=2650 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.849000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:43:13.850000 audit[2709]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_chain pid=2709 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:13.850000 audit[2709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc9d802f0 a2=0 a3=ffffb23bd6c0 items=0 ppid=2650 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.850000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:43:13.854000 audit[2715]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.854000 audit[2715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffea2fd590 a2=0 a3=ffffa37ce6c0 items=0 ppid=2650 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.854000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:43:13.861317 systemd[1]: Started cri-containerd-2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3.scope. Oct 2 20:43:13.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit: BPF prog-id=124 op=LOAD Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2693 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262333163323634623236646434366538316331626432636637653361 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2693 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262333163323634623236646434366538316331626432636637653361 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit: BPF prog-id=125 op=LOAD Oct 2 20:43:13.879000 audit[2708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2693 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262333163323634623236646434366538316331626432636637653361 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.879000 audit: BPF prog-id=126 op=LOAD Oct 2 20:43:13.879000 audit[2708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2693 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262333163323634623236646434366538316331626432636637653361 Oct 2 20:43:13.879000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:43:13.879000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:43:13.880000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.880000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.880000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.880000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.880000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.880000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.880000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.880000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.880000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.880000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:13.880000 audit: BPF prog-id=127 op=LOAD Oct 2 20:43:13.880000 audit[2708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2693 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262333163323634623236646434366538316331626432636637653361 Oct 2 20:43:13.903050 env[1384]: time="2023-10-02T20:43:13.903000968Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-rlxgd,Uid:459c2c8f-fc43-42f0-bff4-95ff5c1b0120,Namespace:kube-system,Attempt:0,} returns sandbox id \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\"" Oct 2 20:43:13.943000 audit[2734]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2734 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.943000 audit[2734]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffee249c80 a2=0 a3=ffff868c46c0 items=0 ppid=2650 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.943000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:43:13.946000 audit[2736]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2736 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.946000 audit[2736]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc1fa0830 a2=0 a3=ffff8f9126c0 items=0 ppid=2650 pid=2736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.946000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:43:13.951000 audit[2739]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=2739 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.951000 audit[2739]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd18bdb40 a2=0 a3=ffffa819b6c0 items=0 ppid=2650 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.951000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:43:13.953000 audit[2740]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_chain pid=2740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.953000 audit[2740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc9c104c0 a2=0 a3=ffff85dc76c0 items=0 ppid=2650 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.953000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:43:13.956000 audit[2742]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2742 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.956000 audit[2742]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdca9be80 a2=0 a3=ffffbc05d6c0 items=0 ppid=2650 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.956000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:43:13.958000 audit[2743]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_chain pid=2743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.958000 audit[2743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd275fd50 a2=0 a3=ffffa2d786c0 items=0 ppid=2650 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.958000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:43:13.962000 audit[2745]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2745 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.962000 audit[2745]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd6b04f50 a2=0 a3=ffff9f7e26c0 items=0 ppid=2650 pid=2745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.962000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:43:13.966000 audit[2748]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2748 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.966000 audit[2748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd40a24a0 a2=0 a3=ffff8f7d26c0 items=0 ppid=2650 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.966000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:43:13.968000 audit[2749]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_chain pid=2749 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.968000 audit[2749]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd323fcb0 a2=0 a3=ffff89eb66c0 items=0 ppid=2650 pid=2749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.968000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:43:13.971000 audit[2751]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2751 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.971000 audit[2751]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcc615d30 a2=0 a3=ffff8517b6c0 items=0 ppid=2650 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.971000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:43:13.973000 audit[2752]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_chain pid=2752 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.973000 audit[2752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd49dc490 a2=0 a3=ffff9d6756c0 items=0 ppid=2650 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.973000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:43:13.976000 audit[2754]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_rule pid=2754 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.976000 audit[2754]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd7466550 a2=0 a3=ffff95ba56c0 items=0 ppid=2650 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.976000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:43:13.981000 audit[2757]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_rule pid=2757 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.981000 audit[2757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff902e0b0 a2=0 a3=ffff8a9666c0 items=0 ppid=2650 pid=2757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.981000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:43:13.986000 audit[2760]: NETFILTER_CFG table=filter:63 family=2 entries=1 op=nft_register_rule pid=2760 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.986000 audit[2760]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff92c6410 a2=0 a3=ffffb56e56c0 items=0 ppid=2650 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.986000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:43:13.989000 audit[2761]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_chain pid=2761 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.989000 audit[2761]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff954bd30 a2=0 a3=ffff8fecc6c0 items=0 ppid=2650 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.989000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:43:13.993000 audit[2763]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2763 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.993000 audit[2763]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffed7746b0 a2=0 a3=ffffb5d0e6c0 items=0 ppid=2650 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.993000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:43:13.997000 audit[2766]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_rule pid=2766 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:13.997000 audit[2766]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdda195f0 a2=0 a3=ffffbbbc86c0 items=0 ppid=2650 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:13.997000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:43:14.005000 audit[2771]: NETFILTER_CFG table=nat:67 family=2 entries=1 op=nft_register_chain pid=2771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:14.005000 audit[2771]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeae37b40 a2=0 a3=ffffb9a606c0 items=0 ppid=2650 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.005000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:43:14.014000 audit[2773]: NETFILTER_CFG table=nat:68 family=2 entries=1 op=nft_register_rule pid=2773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:43:14.014000 audit[2773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe21d45b0 a2=0 a3=ffff8a7f26c0 items=0 ppid=2650 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.014000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:43:14.042000 audit[2775]: NETFILTER_CFG table=filter:69 family=2 entries=8 op=nft_register_rule pid=2775 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:43:14.042000 audit[2775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffe5247d50 a2=0 a3=ffffbdb686c0 items=0 ppid=2650 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.042000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:43:14.061000 audit[2775]: NETFILTER_CFG table=nat:70 family=2 entries=14 op=nft_register_chain pid=2775 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:43:14.061000 audit[2775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffe5247d50 a2=0 a3=ffffbdb686c0 items=0 ppid=2650 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.061000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:43:14.063000 audit[2780]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_chain pid=2780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.063000 audit[2780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdf45b770 a2=0 a3=ffff910d96c0 items=0 ppid=2650 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.063000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:43:14.067000 audit[2782]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2782 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.067000 audit[2782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff242df50 a2=0 a3=ffff85a4e6c0 items=0 ppid=2650 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.067000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:43:14.072000 audit[2785]: NETFILTER_CFG table=filter:73 family=10 entries=2 op=nft_register_chain pid=2785 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.072000 audit[2785]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff4887cc0 a2=0 a3=ffff8312c6c0 items=0 ppid=2650 pid=2785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.072000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:43:14.074000 audit[2786]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_chain pid=2786 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.074000 audit[2786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffe57d170 a2=0 a3=ffff9b1706c0 items=0 ppid=2650 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.074000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:43:14.077000 audit[2788]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_rule pid=2788 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.077000 audit[2788]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc9f80530 a2=0 a3=ffff933826c0 items=0 ppid=2650 pid=2788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.077000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:43:14.078000 audit[2789]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_chain pid=2789 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.078000 audit[2789]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc78bf850 a2=0 a3=ffffa6d6f6c0 items=0 ppid=2650 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.078000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:43:14.082000 audit[2791]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2791 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.082000 audit[2791]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe6d84630 a2=0 a3=ffff846796c0 items=0 ppid=2650 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.082000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:43:14.087000 audit[2794]: NETFILTER_CFG table=filter:78 family=10 entries=2 op=nft_register_chain pid=2794 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.087000 audit[2794]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffcde5f8c0 a2=0 a3=ffffb278c6c0 items=0 ppid=2650 pid=2794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.087000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:43:14.088000 audit[2795]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_chain pid=2795 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.088000 audit[2795]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff96d2bb0 a2=0 a3=ffffa8ef76c0 items=0 ppid=2650 pid=2795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.088000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:43:14.092000 audit[2797]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2797 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.092000 audit[2797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcba2ecc0 a2=0 a3=ffffb78036c0 items=0 ppid=2650 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.092000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:43:14.093000 audit[2798]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_chain pid=2798 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.093000 audit[2798]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff805f760 a2=0 a3=ffff8e8406c0 items=0 ppid=2650 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.093000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:43:14.097000 audit[2800]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_rule pid=2800 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.097000 audit[2800]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe7801ed0 a2=0 a3=ffffa59c96c0 items=0 ppid=2650 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.097000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:43:14.102000 audit[2803]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2803 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.102000 audit[2803]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd1b7dd70 a2=0 a3=ffff844f56c0 items=0 ppid=2650 pid=2803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.102000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:43:14.107000 audit[2806]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2806 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.107000 audit[2806]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd3b54430 a2=0 a3=ffffa4a236c0 items=0 ppid=2650 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.107000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:43:14.109000 audit[2807]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2807 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.109000 audit[2807]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffeadfacf0 a2=0 a3=ffff81c016c0 items=0 ppid=2650 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.109000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:43:14.113000 audit[2809]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2809 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.113000 audit[2809]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd8731f10 a2=0 a3=ffffb0e606c0 items=0 ppid=2650 pid=2809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.113000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:43:14.118000 audit[2812]: NETFILTER_CFG table=nat:87 family=10 entries=2 op=nft_register_chain pid=2812 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.118000 audit[2812]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffffbd1d170 a2=0 a3=ffffbf1766c0 items=0 ppid=2650 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.118000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:43:14.120000 audit[2813]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_chain pid=2813 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.120000 audit[2813]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc90fc80 a2=0 a3=ffffbe4fc6c0 items=0 ppid=2650 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.120000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:43:14.124000 audit[2815]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2815 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.124000 audit[2815]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe37259d0 a2=0 a3=ffffab5566c0 items=0 ppid=2650 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.124000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:43:14.128000 audit[2818]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2818 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.128000 audit[2818]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe53ac7c0 a2=0 a3=ffff878146c0 items=0 ppid=2650 pid=2818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.128000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:43:14.130000 audit[2819]: NETFILTER_CFG table=nat:91 family=10 entries=1 op=nft_register_chain pid=2819 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.130000 audit[2819]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdde166d0 a2=0 a3=ffff9b9c26c0 items=0 ppid=2650 pid=2819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.130000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:43:14.133000 audit[2821]: NETFILTER_CFG table=nat:92 family=10 entries=2 op=nft_register_chain pid=2821 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:43:14.133000 audit[2821]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffee95d410 a2=0 a3=ffff867856c0 items=0 ppid=2650 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.133000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:43:14.138000 audit[2823]: NETFILTER_CFG table=filter:93 family=10 entries=3 op=nft_register_rule pid=2823 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:43:14.138000 audit[2823]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=fffff470f820 a2=0 a3=ffff8b4c66c0 items=0 ppid=2650 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.138000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:43:14.138000 audit[2823]: NETFILTER_CFG table=nat:94 family=10 entries=7 op=nft_register_chain pid=2823 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:43:14.138000 audit[2823]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=fffff470f820 a2=0 a3=ffff8b4c66c0 items=0 ppid=2650 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.138000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:43:18.439109 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3068165233.mount: Deactivated successfully. Oct 2 20:43:19.237909 kubelet[2480]: I1002 20:43:19.237807 2480 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-qvw4r" podStartSLOduration=6.237774651 podCreationTimestamp="2023-10-02 20:43:13 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:43:14.304439374 +0000 UTC m=+15.197998258" watchObservedRunningTime="2023-10-02 20:43:19.237774651 +0000 UTC m=+20.131333535" Oct 2 20:43:20.820915 env[1384]: time="2023-10-02T20:43:20.820869507Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:43:20.835211 env[1384]: time="2023-10-02T20:43:20.835140559Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:43:20.842733 env[1384]: time="2023-10-02T20:43:20.842687305Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:43:20.843410 env[1384]: time="2023-10-02T20:43:20.843382464Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 20:43:20.845934 env[1384]: time="2023-10-02T20:43:20.845617459Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:43:20.847819 env[1384]: time="2023-10-02T20:43:20.847779815Z" level=info msg="CreateContainer within sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:43:20.891549 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1390168043.mount: Deactivated successfully. Oct 2 20:43:20.897424 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1007565114.mount: Deactivated successfully. Oct 2 20:43:20.927370 env[1384]: time="2023-10-02T20:43:20.927294863Z" level=info msg="CreateContainer within sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972\"" Oct 2 20:43:20.928041 env[1384]: time="2023-10-02T20:43:20.927978861Z" level=info msg="StartContainer for \"8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972\"" Oct 2 20:43:20.952086 systemd[1]: Started cri-containerd-8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972.scope. Oct 2 20:43:20.966960 systemd[1]: cri-containerd-8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972.scope: Deactivated successfully. Oct 2 20:43:21.888259 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972-rootfs.mount: Deactivated successfully. Oct 2 20:43:22.696136 env[1384]: time="2023-10-02T20:43:22.696084480Z" level=info msg="shim disconnected" id=8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972 Oct 2 20:43:22.696562 env[1384]: time="2023-10-02T20:43:22.696541399Z" level=warning msg="cleaning up after shim disconnected" id=8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972 namespace=k8s.io Oct 2 20:43:22.696736 env[1384]: time="2023-10-02T20:43:22.696722479Z" level=info msg="cleaning up dead shim" Oct 2 20:43:22.709642 env[1384]: time="2023-10-02T20:43:22.709593255Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:43:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2850 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:43:22Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:43:22.710143 env[1384]: time="2023-10-02T20:43:22.710039894Z" level=error msg="copy shim log" error="read /proc/self/fd/54: file already closed" Oct 2 20:43:22.710664 env[1384]: time="2023-10-02T20:43:22.710433133Z" level=error msg="Failed to pipe stderr of container \"8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972\"" error="reading from a closed fifo" Oct 2 20:43:22.710795 env[1384]: time="2023-10-02T20:43:22.710434493Z" level=error msg="Failed to pipe stdout of container \"8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972\"" error="reading from a closed fifo" Oct 2 20:43:22.716051 env[1384]: time="2023-10-02T20:43:22.715989123Z" level=error msg="StartContainer for \"8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:43:22.716484 kubelet[2480]: E1002 20:43:22.716447 2480 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972" Oct 2 20:43:22.716764 kubelet[2480]: E1002 20:43:22.716596 2480 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:43:22.716764 kubelet[2480]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:43:22.716764 kubelet[2480]: rm /hostbin/cilium-mount Oct 2 20:43:22.716833 kubelet[2480]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-68l7k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:43:22.716833 kubelet[2480]: E1002 20:43:22.716645 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:43:23.319899 env[1384]: time="2023-10-02T20:43:23.319856301Z" level=info msg="CreateContainer within sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:43:23.374269 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3575547025.mount: Deactivated successfully. Oct 2 20:43:23.396208 env[1384]: time="2023-10-02T20:43:23.396137563Z" level=info msg="CreateContainer within sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e\"" Oct 2 20:43:23.397858 env[1384]: time="2023-10-02T20:43:23.396668162Z" level=info msg="StartContainer for \"994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e\"" Oct 2 20:43:23.422505 systemd[1]: Started cri-containerd-994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e.scope. Oct 2 20:43:23.438590 systemd[1]: cri-containerd-994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e.scope: Deactivated successfully. Oct 2 20:43:23.471734 env[1384]: time="2023-10-02T20:43:23.471476387Z" level=info msg="shim disconnected" id=994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e Oct 2 20:43:23.471734 env[1384]: time="2023-10-02T20:43:23.471546906Z" level=warning msg="cleaning up after shim disconnected" id=994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e namespace=k8s.io Oct 2 20:43:23.471734 env[1384]: time="2023-10-02T20:43:23.471556026Z" level=info msg="cleaning up dead shim" Oct 2 20:43:23.484390 env[1384]: time="2023-10-02T20:43:23.484333123Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:43:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2888 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:43:23Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:43:23.484655 env[1384]: time="2023-10-02T20:43:23.484598843Z" level=error msg="copy shim log" error="read /proc/self/fd/53: file already closed" Oct 2 20:43:23.486261 env[1384]: time="2023-10-02T20:43:23.486218320Z" level=error msg="Failed to pipe stdout of container \"994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e\"" error="reading from a closed fifo" Oct 2 20:43:23.487235 env[1384]: time="2023-10-02T20:43:23.487208358Z" level=error msg="Failed to pipe stderr of container \"994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e\"" error="reading from a closed fifo" Oct 2 20:43:23.505863 env[1384]: time="2023-10-02T20:43:23.505756685Z" level=error msg="StartContainer for \"994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:43:23.507580 kubelet[2480]: E1002 20:43:23.506303 2480 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e" Oct 2 20:43:23.507580 kubelet[2480]: E1002 20:43:23.506413 2480 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:43:23.507580 kubelet[2480]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:43:23.507580 kubelet[2480]: rm /hostbin/cilium-mount Oct 2 20:43:23.507580 kubelet[2480]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-68l7k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:43:23.507580 kubelet[2480]: E1002 20:43:23.506464 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:43:24.317195 kubelet[2480]: I1002 20:43:24.316465 2480 scope.go:115] "RemoveContainer" containerID="8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972" Oct 2 20:43:24.317195 kubelet[2480]: I1002 20:43:24.316821 2480 scope.go:115] "RemoveContainer" containerID="8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972" Oct 2 20:43:24.321741 env[1384]: time="2023-10-02T20:43:24.321702539Z" level=info msg="RemoveContainer for \"8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972\"" Oct 2 20:43:24.340605 env[1384]: time="2023-10-02T20:43:24.340563266Z" level=info msg="RemoveContainer for \"8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972\" returns successfully" Oct 2 20:43:24.341401 env[1384]: time="2023-10-02T20:43:24.341374784Z" level=info msg="RemoveContainer for \"8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972\"" Oct 2 20:43:24.341528 env[1384]: time="2023-10-02T20:43:24.341510344Z" level=info msg="RemoveContainer for \"8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972\" returns successfully" Oct 2 20:43:24.343459 kubelet[2480]: E1002 20:43:24.342017 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:43:24.367135 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e-rootfs.mount: Deactivated successfully. Oct 2 20:43:24.671103 env[1384]: time="2023-10-02T20:43:24.670772800Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:43:24.680888 env[1384]: time="2023-10-02T20:43:24.680856142Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:43:24.686417 env[1384]: time="2023-10-02T20:43:24.686384852Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:43:24.686949 env[1384]: time="2023-10-02T20:43:24.686914731Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 20:43:24.691349 env[1384]: time="2023-10-02T20:43:24.691312883Z" level=info msg="CreateContainer within sandbox \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:43:24.719407 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3680637852.mount: Deactivated successfully. Oct 2 20:43:24.724018 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3162119766.mount: Deactivated successfully. Oct 2 20:43:24.741601 env[1384]: time="2023-10-02T20:43:24.741554594Z" level=info msg="CreateContainer within sandbox \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\"" Oct 2 20:43:24.743740 env[1384]: time="2023-10-02T20:43:24.743383591Z" level=info msg="StartContainer for \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\"" Oct 2 20:43:24.764222 systemd[1]: Started cri-containerd-564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08.scope. Oct 2 20:43:24.788219 kernel: kauditd_printk_skb: 372 callbacks suppressed Oct 2 20:43:24.788338 kernel: audit: type=1400 audit(1696279404.781:1078): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.820848 kernel: audit: type=1400 audit(1696279404.781:1079): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.837878 kernel: audit: type=1400 audit(1696279404.781:1080): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.855729 kernel: audit: type=1400 audit(1696279404.781:1081): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.872736 kernel: audit: type=1400 audit(1696279404.781:1082): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.889688 kernel: audit: type=1400 audit(1696279404.781:1083): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.907529 kernel: audit: type=1400 audit(1696279404.781:1084): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.925210 kernel: audit: type=1400 audit(1696279404.781:1085): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.943814 kernel: audit: type=1400 audit(1696279404.781:1086): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.945980 env[1384]: time="2023-10-02T20:43:24.945944951Z" level=info msg="StartContainer for \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\" returns successfully" Oct 2 20:43:24.962592 kernel: audit: type=1400 audit(1696279404.786:1087): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.786000 audit: BPF prog-id=128 op=LOAD Oct 2 20:43:24.802000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.802000 audit[2907]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2693 pid=2907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:24.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536343437306161393330303630633262303831366263326564306332 Oct 2 20:43:24.802000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.802000 audit[2907]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2693 pid=2907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:24.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536343437306161393330303630633262303831366263326564306332 Oct 2 20:43:24.802000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.802000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.802000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.802000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.802000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.802000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.802000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.802000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.802000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.802000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.802000 audit: BPF prog-id=129 op=LOAD Oct 2 20:43:24.802000 audit[2907]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2693 pid=2907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:24.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536343437306161393330303630633262303831366263326564306332 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit: BPF prog-id=130 op=LOAD Oct 2 20:43:24.803000 audit[2907]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2693 pid=2907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:24.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536343437306161393330303630633262303831366263326564306332 Oct 2 20:43:24.803000 audit: BPF prog-id=130 op=UNLOAD Oct 2 20:43:24.803000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:24.803000 audit: BPF prog-id=131 op=LOAD Oct 2 20:43:24.803000 audit[2907]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2693 pid=2907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:24.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536343437306161393330303630633262303831366263326564306332 Oct 2 20:43:24.984000 audit[2918]: AVC avc: denied { map_create } for pid=2918 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c11,c451 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c11,c451 tclass=bpf permissive=0 Oct 2 20:43:24.984000 audit[2918]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=40005b9768 a2=48 a3=0 items=0 ppid=2693 pid=2918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c11,c451 key=(null) Oct 2 20:43:24.984000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:43:25.321026 kubelet[2480]: E1002 20:43:25.320999 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:43:25.384320 kubelet[2480]: I1002 20:43:25.384279 2480 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-rlxgd" podStartSLOduration=1.601029021 podCreationTimestamp="2023-10-02 20:43:13 +0000 UTC" firstStartedPulling="2023-10-02 20:43:13.904428485 +0000 UTC m=+14.797987329" lastFinishedPulling="2023-10-02 20:43:24.68763769 +0000 UTC m=+25.581196534" observedRunningTime="2023-10-02 20:43:25.333079715 +0000 UTC m=+26.226638599" watchObservedRunningTime="2023-10-02 20:43:25.384238226 +0000 UTC m=+26.277797150" Oct 2 20:43:25.803027 kubelet[2480]: W1002 20:43:25.802914 2480 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5db1c46f_8948_4fc2_b38e_819dab56fed0.slice/cri-containerd-8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972.scope WatchSource:0}: container "8ce760d4daa4e121255f547e4e6a900d8f63286ef5aa78661f4ce5cccf41e972" in namespace "k8s.io": not found Oct 2 20:43:28.909532 kubelet[2480]: W1002 20:43:28.909496 2480 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5db1c46f_8948_4fc2_b38e_819dab56fed0.slice/cri-containerd-994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e.scope WatchSource:0}: task 994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e not found: not found Oct 2 20:43:37.235479 env[1384]: time="2023-10-02T20:43:37.234898102Z" level=info msg="CreateContainer within sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:43:37.266911 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3753339197.mount: Deactivated successfully. Oct 2 20:43:37.272261 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2673038931.mount: Deactivated successfully. Oct 2 20:43:37.286435 env[1384]: time="2023-10-02T20:43:37.286387428Z" level=info msg="CreateContainer within sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e\"" Oct 2 20:43:37.286963 env[1384]: time="2023-10-02T20:43:37.286919948Z" level=info msg="StartContainer for \"5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e\"" Oct 2 20:43:37.309954 systemd[1]: Started cri-containerd-5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e.scope. Oct 2 20:43:37.326005 systemd[1]: cri-containerd-5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e.scope: Deactivated successfully. Oct 2 20:43:37.657140 env[1384]: time="2023-10-02T20:43:37.657085382Z" level=info msg="shim disconnected" id=5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e Oct 2 20:43:37.657140 env[1384]: time="2023-10-02T20:43:37.657137662Z" level=warning msg="cleaning up after shim disconnected" id=5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e namespace=k8s.io Oct 2 20:43:37.657140 env[1384]: time="2023-10-02T20:43:37.657147462Z" level=info msg="cleaning up dead shim" Oct 2 20:43:37.669097 env[1384]: time="2023-10-02T20:43:37.669045285Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:43:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2962 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:43:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:43:37.669369 env[1384]: time="2023-10-02T20:43:37.669309164Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 20:43:37.669576 env[1384]: time="2023-10-02T20:43:37.669547404Z" level=error msg="Failed to pipe stderr of container \"5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e\"" error="reading from a closed fifo" Oct 2 20:43:37.670909 env[1384]: time="2023-10-02T20:43:37.670881082Z" level=error msg="Failed to pipe stdout of container \"5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e\"" error="reading from a closed fifo" Oct 2 20:43:37.680957 env[1384]: time="2023-10-02T20:43:37.680900108Z" level=error msg="StartContainer for \"5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:43:37.681145 kubelet[2480]: E1002 20:43:37.681119 2480 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e" Oct 2 20:43:37.681429 kubelet[2480]: E1002 20:43:37.681242 2480 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:43:37.681429 kubelet[2480]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:43:37.681429 kubelet[2480]: rm /hostbin/cilium-mount Oct 2 20:43:37.681429 kubelet[2480]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-68l7k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:43:37.681429 kubelet[2480]: E1002 20:43:37.681277 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:43:38.264375 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e-rootfs.mount: Deactivated successfully. Oct 2 20:43:38.343447 kubelet[2480]: I1002 20:43:38.343389 2480 scope.go:115] "RemoveContainer" containerID="994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e" Oct 2 20:43:38.345296 kubelet[2480]: I1002 20:43:38.345247 2480 scope.go:115] "RemoveContainer" containerID="994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e" Oct 2 20:43:38.356748 env[1384]: time="2023-10-02T20:43:38.356387876Z" level=info msg="RemoveContainer for \"994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e\"" Oct 2 20:43:38.357923 env[1384]: time="2023-10-02T20:43:38.357874994Z" level=info msg="RemoveContainer for \"994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e\"" Oct 2 20:43:38.358007 env[1384]: time="2023-10-02T20:43:38.357958113Z" level=error msg="RemoveContainer for \"994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e\" failed" error="failed to set removing state for container \"994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e\": container is already in removing state" Oct 2 20:43:38.358157 kubelet[2480]: E1002 20:43:38.358134 2480 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e\": container is already in removing state" containerID="994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e" Oct 2 20:43:38.358242 kubelet[2480]: E1002 20:43:38.358193 2480 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e": container is already in removing state; Skipping pod "cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)" Oct 2 20:43:38.360545 kubelet[2480]: E1002 20:43:38.358518 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:43:38.372774 env[1384]: time="2023-10-02T20:43:38.372639133Z" level=info msg="RemoveContainer for \"994faf91f1799cabd2515e4589d110f478da3d8035b93b44012d68e3afac5a7e\" returns successfully" Oct 2 20:43:40.763859 kubelet[2480]: W1002 20:43:40.763818 2480 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5db1c46f_8948_4fc2_b38e_819dab56fed0.slice/cri-containerd-5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e.scope WatchSource:0}: task 5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e not found: not found Oct 2 20:43:50.229077 kubelet[2480]: E1002 20:43:50.229034 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:43:54.780000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:54.786528 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 20:43:54.786633 kernel: audit: type=1400 audit(1696279434.780:1097): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:54.780000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:54.830189 kernel: audit: type=1400 audit(1696279434.780:1098): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:54.830307 kernel: audit: type=1300 audit(1696279434.780:1098): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002626c00 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:43:54.780000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002626c00 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:43:54.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:54.884103 kernel: audit: type=1327 audit(1696279434.780:1098): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:54.884256 kernel: audit: type=1300 audit(1696279434.780:1097): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023a1ae0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:43:54.780000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023a1ae0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:43:54.914190 kernel: audit: type=1327 audit(1696279434.780:1097): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:54.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:55.179000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:55.179000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4004059800 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:43:55.233419 kernel: audit: type=1400 audit(1696279435.179:1099): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:55.233573 kernel: audit: type=1300 audit(1696279435.179:1099): arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4004059800 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:43:55.179000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:43:55.259442 kernel: audit: type=1327 audit(1696279435.179:1099): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:43:55.259576 kernel: audit: type=1400 audit(1696279435.180:1100): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:55.180000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:55.180000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4008aa93a0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:43:55.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:43:55.181000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:55.181000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=40040598c0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:43:55.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:43:55.182000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:55.182000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4003c3c840 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:43:55.182000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:43:55.184000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:55.184000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4004059b30 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:43:55.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:43:55.184000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:55.184000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4008b69740 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:43:55.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:44:04.232932 env[1384]: time="2023-10-02T20:44:04.232891223Z" level=info msg="CreateContainer within sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:44:04.257438 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4108316367.mount: Deactivated successfully. Oct 2 20:44:04.261992 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount957947046.mount: Deactivated successfully. Oct 2 20:44:04.277459 env[1384]: time="2023-10-02T20:44:04.277367097Z" level=info msg="CreateContainer within sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a\"" Oct 2 20:44:04.278997 env[1384]: time="2023-10-02T20:44:04.278927976Z" level=info msg="StartContainer for \"9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a\"" Oct 2 20:44:04.300434 systemd[1]: Started cri-containerd-9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a.scope. Oct 2 20:44:04.316216 systemd[1]: cri-containerd-9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a.scope: Deactivated successfully. Oct 2 20:44:04.372781 env[1384]: time="2023-10-02T20:44:04.372730480Z" level=info msg="shim disconnected" id=9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a Oct 2 20:44:04.373007 env[1384]: time="2023-10-02T20:44:04.372989840Z" level=warning msg="cleaning up after shim disconnected" id=9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a namespace=k8s.io Oct 2 20:44:04.373080 env[1384]: time="2023-10-02T20:44:04.373067800Z" level=info msg="cleaning up dead shim" Oct 2 20:44:04.386887 env[1384]: time="2023-10-02T20:44:04.386845866Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:44:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3007 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:44:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:44:04.387298 env[1384]: time="2023-10-02T20:44:04.387248025Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:44:04.388616 env[1384]: time="2023-10-02T20:44:04.388582344Z" level=error msg="Failed to pipe stderr of container \"9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a\"" error="reading from a closed fifo" Oct 2 20:44:04.388719 env[1384]: time="2023-10-02T20:44:04.388582864Z" level=error msg="Failed to pipe stdout of container \"9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a\"" error="reading from a closed fifo" Oct 2 20:44:04.399464 env[1384]: time="2023-10-02T20:44:04.399413413Z" level=error msg="StartContainer for \"9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:44:04.399619 kubelet[2480]: E1002 20:44:04.399595 2480 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a" Oct 2 20:44:04.399883 kubelet[2480]: E1002 20:44:04.399697 2480 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:44:04.399883 kubelet[2480]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:44:04.399883 kubelet[2480]: rm /hostbin/cilium-mount Oct 2 20:44:04.399883 kubelet[2480]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-68l7k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:44:04.399883 kubelet[2480]: E1002 20:44:04.399732 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:44:05.255322 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a-rootfs.mount: Deactivated successfully. Oct 2 20:44:05.388349 kubelet[2480]: I1002 20:44:05.388319 2480 scope.go:115] "RemoveContainer" containerID="5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e" Oct 2 20:44:05.388637 kubelet[2480]: I1002 20:44:05.388617 2480 scope.go:115] "RemoveContainer" containerID="5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e" Oct 2 20:44:05.390369 env[1384]: time="2023-10-02T20:44:05.390326324Z" level=info msg="RemoveContainer for \"5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e\"" Oct 2 20:44:05.399201 env[1384]: time="2023-10-02T20:44:05.393031521Z" level=info msg="RemoveContainer for \"5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e\"" Oct 2 20:44:05.399201 env[1384]: time="2023-10-02T20:44:05.393121001Z" level=error msg="RemoveContainer for \"5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e\" failed" error="failed to set removing state for container \"5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e\": container is already in removing state" Oct 2 20:44:05.399344 kubelet[2480]: E1002 20:44:05.396326 2480 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e\": container is already in removing state" containerID="5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e" Oct 2 20:44:05.399344 kubelet[2480]: E1002 20:44:05.396359 2480 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e": container is already in removing state; Skipping pod "cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)" Oct 2 20:44:05.399344 kubelet[2480]: E1002 20:44:05.396645 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:44:05.402346 env[1384]: time="2023-10-02T20:44:05.402242752Z" level=info msg="RemoveContainer for \"5b57b87eabcf3c7663d973d2a198fdf82805226d7f531b508031aa6d8ea5319e\" returns successfully" Oct 2 20:44:07.476943 kubelet[2480]: W1002 20:44:07.476907 2480 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5db1c46f_8948_4fc2_b38e_819dab56fed0.slice/cri-containerd-9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a.scope WatchSource:0}: task 9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a not found: not found Oct 2 20:44:11.759000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:11.765615 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:44:11.765713 kernel: audit: type=1400 audit(1696279451.759:1105): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:11.759000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002573420 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:44:11.816988 kernel: audit: type=1300 audit(1696279451.759:1105): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002573420 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:44:11.759000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:11.840941 kernel: audit: type=1327 audit(1696279451.759:1105): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:11.841094 kernel: audit: type=1400 audit(1696279451.761:1106): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:11.761000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:11.761000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b9100 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:44:11.890609 kernel: audit: type=1300 audit(1696279451.761:1106): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b9100 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:44:11.761000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:11.915822 kernel: audit: type=1327 audit(1696279451.761:1106): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:11.915979 kernel: audit: type=1400 audit(1696279451.761:1107): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:11.761000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:11.761000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b9120 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:44:11.965513 kernel: audit: type=1300 audit(1696279451.761:1107): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b9120 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:44:11.761000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:11.989263 kernel: audit: type=1327 audit(1696279451.761:1107): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:11.989378 kernel: audit: type=1400 audit(1696279451.761:1108): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:11.761000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:11.761000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b9140 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:44:11.761000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:17.230590 kubelet[2480]: E1002 20:44:17.230565 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:44:32.228946 kubelet[2480]: E1002 20:44:32.228913 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:44:46.231149 env[1384]: time="2023-10-02T20:44:46.231036560Z" level=info msg="CreateContainer within sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:44:46.256808 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3657448847.mount: Deactivated successfully. Oct 2 20:44:46.260921 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount43851262.mount: Deactivated successfully. Oct 2 20:44:46.281221 env[1384]: time="2023-10-02T20:44:46.281148308Z" level=info msg="CreateContainer within sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df\"" Oct 2 20:44:46.283207 env[1384]: time="2023-10-02T20:44:46.282066983Z" level=info msg="StartContainer for \"21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df\"" Oct 2 20:44:46.308733 systemd[1]: Started cri-containerd-21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df.scope. Oct 2 20:44:46.324095 systemd[1]: cri-containerd-21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df.scope: Deactivated successfully. Oct 2 20:44:46.350950 env[1384]: time="2023-10-02T20:44:46.350896381Z" level=info msg="shim disconnected" id=21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df Oct 2 20:44:46.350950 env[1384]: time="2023-10-02T20:44:46.350952861Z" level=warning msg="cleaning up after shim disconnected" id=21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df namespace=k8s.io Oct 2 20:44:46.351207 env[1384]: time="2023-10-02T20:44:46.350963101Z" level=info msg="cleaning up dead shim" Oct 2 20:44:46.363579 env[1384]: time="2023-10-02T20:44:46.363522307Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:44:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3047 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:44:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:44:46.363853 env[1384]: time="2023-10-02T20:44:46.363795586Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:44:46.364134 env[1384]: time="2023-10-02T20:44:46.364092144Z" level=error msg="Failed to pipe stdout of container \"21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df\"" error="reading from a closed fifo" Oct 2 20:44:46.364258 env[1384]: time="2023-10-02T20:44:46.364232303Z" level=error msg="Failed to pipe stderr of container \"21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df\"" error="reading from a closed fifo" Oct 2 20:44:46.370356 env[1384]: time="2023-10-02T20:44:46.370306508Z" level=error msg="StartContainer for \"21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:44:46.370632 kubelet[2480]: E1002 20:44:46.370599 2480 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df" Oct 2 20:44:46.370879 kubelet[2480]: E1002 20:44:46.370721 2480 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:44:46.370879 kubelet[2480]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:44:46.370879 kubelet[2480]: rm /hostbin/cilium-mount Oct 2 20:44:46.370879 kubelet[2480]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-68l7k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:44:46.370879 kubelet[2480]: E1002 20:44:46.370758 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:44:46.459570 kubelet[2480]: I1002 20:44:46.459539 2480 scope.go:115] "RemoveContainer" containerID="9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a" Oct 2 20:44:46.460207 kubelet[2480]: I1002 20:44:46.460159 2480 scope.go:115] "RemoveContainer" containerID="9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a" Oct 2 20:44:46.467184 env[1384]: time="2023-10-02T20:44:46.467129223Z" level=info msg="RemoveContainer for \"9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a\"" Oct 2 20:44:46.469351 env[1384]: time="2023-10-02T20:44:46.469308810Z" level=info msg="RemoveContainer for \"9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a\"" Oct 2 20:44:46.469442 env[1384]: time="2023-10-02T20:44:46.469392450Z" level=error msg="RemoveContainer for \"9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a\" failed" error="failed to set removing state for container \"9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a\": container is already in removing state" Oct 2 20:44:46.471351 kubelet[2480]: E1002 20:44:46.469668 2480 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a\": container is already in removing state" containerID="9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a" Oct 2 20:44:46.471351 kubelet[2480]: E1002 20:44:46.469700 2480 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a": container is already in removing state; Skipping pod "cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)" Oct 2 20:44:46.471351 kubelet[2480]: E1002 20:44:46.470011 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:44:46.480815 env[1384]: time="2023-10-02T20:44:46.480778983Z" level=info msg="RemoveContainer for \"9a865ae735a2f0ff2cfea98c99fd7f7f707df07ca7c98cf25ba74059f3d6537a\" returns successfully" Oct 2 20:44:47.252505 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df-rootfs.mount: Deactivated successfully. Oct 2 20:44:49.455524 kubelet[2480]: W1002 20:44:49.455485 2480 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5db1c46f_8948_4fc2_b38e_819dab56fed0.slice/cri-containerd-21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df.scope WatchSource:0}: task 21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df not found: not found Oct 2 20:44:53.774141 systemd[1]: Started sshd@7-10.200.20.29:22-10.200.12.6:52526.service. Oct 2 20:44:53.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.29:22-10.200.12.6:52526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:44:53.779176 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:44:53.779270 kernel: audit: type=1130 audit(1696279493.773:1109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.29:22-10.200.12.6:52526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:44:54.181000 audit[3060]: USER_ACCT pid=3060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:54.182636 sshd[3060]: Accepted publickey for core from 10.200.12.6 port 52526 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:44:54.208183 kernel: audit: type=1101 audit(1696279494.181:1110): pid=3060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:54.208289 kernel: audit: type=1103 audit(1696279494.205:1111): pid=3060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:54.205000 audit[3060]: CRED_ACQ pid=3060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:54.208654 sshd[3060]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:44:54.243509 kernel: audit: type=1006 audit(1696279494.205:1112): pid=3060 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 20:44:54.205000 audit[3060]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe46cdce0 a2=3 a3=1 items=0 ppid=1 pid=3060 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:44:54.267179 kernel: audit: type=1300 audit(1696279494.205:1112): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe46cdce0 a2=3 a3=1 items=0 ppid=1 pid=3060 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:44:54.205000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:44:54.275102 kernel: audit: type=1327 audit(1696279494.205:1112): proctitle=737368643A20636F7265205B707269765D Oct 2 20:44:54.279679 systemd-logind[1364]: New session 10 of user core. Oct 2 20:44:54.280109 systemd[1]: Started session-10.scope. Oct 2 20:44:54.283000 audit[3060]: USER_START pid=3060 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:54.283000 audit[3062]: CRED_ACQ pid=3062 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:54.329405 kernel: audit: type=1105 audit(1696279494.283:1113): pid=3060 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:54.329644 kernel: audit: type=1103 audit(1696279494.283:1114): pid=3062 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:54.607470 sshd[3060]: pam_unix(sshd:session): session closed for user core Oct 2 20:44:54.607000 audit[3060]: USER_END pid=3060 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:54.613961 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:44:54.614777 systemd[1]: sshd@7-10.200.20.29:22-10.200.12.6:52526.service: Deactivated successfully. Oct 2 20:44:54.608000 audit[3060]: CRED_DISP pid=3060 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:54.655330 kernel: audit: type=1106 audit(1696279494.607:1115): pid=3060 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:54.655428 kernel: audit: type=1104 audit(1696279494.608:1116): pid=3060 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:54.634816 systemd-logind[1364]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:44:54.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.29:22-10.200.12.6:52526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:44:54.656194 systemd-logind[1364]: Removed session 10. Oct 2 20:44:54.782000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:54.782000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:54.782000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c1d620 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:44:54.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:54.782000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000493620 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:44:54.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:55.179000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:55.179000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=40025ed830 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:44:55.179000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:44:55.180000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:55.180000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=400c19fda0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:44:55.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:44:55.181000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:55.181000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=40034098f0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:44:55.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:44:55.183000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:55.183000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4003409a40 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:44:55.183000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:44:55.185000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:55.185000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=400c19fea0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:44:55.185000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:44:55.185000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:55.185000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40025eda40 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:44:55.185000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:44:57.229828 kubelet[2480]: E1002 20:44:57.229785 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:44:59.295890 kubelet[2480]: E1002 20:44:59.295851 2480 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:44:59.359303 kubelet[2480]: E1002 20:44:59.359264 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:04.360497 kubelet[2480]: E1002 20:45:04.360471 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:04.701589 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:45:04.701733 kernel: audit: type=1130 audit(1696279504.675:1126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.29:22-10.200.12.6:56284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:04.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.29:22-10.200.12.6:56284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:04.676791 systemd[1]: Started sshd@8-10.200.20.29:22-10.200.12.6:56284.service. Oct 2 20:45:05.081000 audit[3075]: USER_ACCT pid=3075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:05.084586 sshd[3075]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:45:05.085951 sshd[3075]: Accepted publickey for core from 10.200.12.6 port 56284 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:45:05.083000 audit[3075]: CRED_ACQ pid=3075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:05.129611 kernel: audit: type=1101 audit(1696279505.081:1127): pid=3075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:05.129800 kernel: audit: type=1103 audit(1696279505.083:1128): pid=3075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:05.143999 kernel: audit: type=1006 audit(1696279505.083:1129): pid=3075 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:45:05.083000 audit[3075]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0932b20 a2=3 a3=1 items=0 ppid=1 pid=3075 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:45:05.167831 kernel: audit: type=1300 audit(1696279505.083:1129): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0932b20 a2=3 a3=1 items=0 ppid=1 pid=3075 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:45:05.167508 systemd-logind[1364]: New session 11 of user core. Oct 2 20:45:05.167897 systemd[1]: Started session-11.scope. Oct 2 20:45:05.083000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:45:05.176958 kernel: audit: type=1327 audit(1696279505.083:1129): proctitle=737368643A20636F7265205B707269765D Oct 2 20:45:05.179000 audit[3075]: USER_START pid=3075 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:05.205000 audit[3077]: CRED_ACQ pid=3077 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:05.207187 kernel: audit: type=1105 audit(1696279505.179:1130): pid=3075 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:05.228193 kernel: audit: type=1103 audit(1696279505.205:1131): pid=3077 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:05.512020 sshd[3075]: pam_unix(sshd:session): session closed for user core Oct 2 20:45:05.512000 audit[3075]: USER_END pid=3075 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:05.512000 audit[3075]: CRED_DISP pid=3075 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:05.560068 kernel: audit: type=1106 audit(1696279505.512:1132): pid=3075 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:05.560177 kernel: audit: type=1104 audit(1696279505.512:1133): pid=3075 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:05.559000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.29:22-10.200.12.6:56284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:05.560573 systemd[1]: sshd@8-10.200.20.29:22-10.200.12.6:56284.service: Deactivated successfully. Oct 2 20:45:05.561345 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:45:05.561940 systemd-logind[1364]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:45:05.562720 systemd-logind[1364]: Removed session 11. Oct 2 20:45:09.361922 kubelet[2480]: E1002 20:45:09.361899 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:11.762000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:11.767868 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:45:11.767971 kernel: audit: type=1400 audit(1696279511.762:1135): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:11.762000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:11.811009 kernel: audit: type=1400 audit(1696279511.762:1136): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:11.762000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c147e0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:45:11.762000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:11.866492 kernel: audit: type=1300 audit(1696279511.762:1136): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c147e0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:45:11.866606 kernel: audit: type=1327 audit(1696279511.762:1136): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:11.762000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:11.887786 kernel: audit: type=1400 audit(1696279511.762:1137): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:11.762000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c14820 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:45:11.915971 kernel: audit: type=1300 audit(1696279511.762:1137): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c14820 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:45:11.762000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:11.939228 kernel: audit: type=1327 audit(1696279511.762:1137): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:11.762000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:11.960707 kernel: audit: type=1400 audit(1696279511.762:1138): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:11.762000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c14860 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:45:11.989738 kernel: audit: type=1300 audit(1696279511.762:1138): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c14860 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:45:11.762000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:12.012941 kernel: audit: type=1327 audit(1696279511.762:1138): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:11.762000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bdbca0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:45:11.762000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:12.229496 kubelet[2480]: E1002 20:45:12.229458 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:45:14.363609 kubelet[2480]: E1002 20:45:14.363579 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:15.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.29:22-10.200.12.6:55762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:15.584372 systemd[1]: Started sshd@9-10.200.20.29:22-10.200.12.6:55762.service. Oct 2 20:45:15.982000 audit[3089]: USER_ACCT pid=3089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:15.984132 sshd[3089]: Accepted publickey for core from 10.200.12.6 port 55762 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:45:15.984000 audit[3089]: CRED_ACQ pid=3089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:15.984000 audit[3089]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5753360 a2=3 a3=1 items=0 ppid=1 pid=3089 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:45:15.984000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:45:15.986053 sshd[3089]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:45:15.989891 systemd-logind[1364]: New session 12 of user core. Oct 2 20:45:15.990468 systemd[1]: Started session-12.scope. Oct 2 20:45:15.993000 audit[3089]: USER_START pid=3089 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:15.996000 audit[3091]: CRED_ACQ pid=3091 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:16.353743 sshd[3089]: pam_unix(sshd:session): session closed for user core Oct 2 20:45:16.353000 audit[3089]: USER_END pid=3089 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:16.353000 audit[3089]: CRED_DISP pid=3089 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:16.356618 systemd-logind[1364]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:45:16.356714 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:45:16.357349 systemd[1]: sshd@9-10.200.20.29:22-10.200.12.6:55762.service: Deactivated successfully. Oct 2 20:45:16.356000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.29:22-10.200.12.6:55762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:16.358355 systemd-logind[1364]: Removed session 12. Oct 2 20:45:19.364254 kubelet[2480]: E1002 20:45:19.364232 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:23.229461 kubelet[2480]: E1002 20:45:23.229429 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:45:24.366285 kubelet[2480]: E1002 20:45:24.366262 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:26.450810 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:45:26.450939 kernel: audit: type=1130 audit(1696279526.421:1148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.29:22-10.200.12.6:60126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:26.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.29:22-10.200.12.6:60126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:26.422114 systemd[1]: Started sshd@10-10.200.20.29:22-10.200.12.6:60126.service. Oct 2 20:45:26.829000 audit[3101]: USER_ACCT pid=3101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:26.832028 sshd[3101]: Accepted publickey for core from 10.200.12.6 port 60126 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:45:26.852000 audit[3101]: CRED_ACQ pid=3101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:26.853888 sshd[3101]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:45:26.854335 kernel: audit: type=1101 audit(1696279526.829:1149): pid=3101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:26.890542 kernel: audit: type=1103 audit(1696279526.852:1150): pid=3101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:26.890688 kernel: audit: type=1006 audit(1696279526.852:1151): pid=3101 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 20:45:26.891093 kernel: audit: type=1300 audit(1696279526.852:1151): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5d9fab0 a2=3 a3=1 items=0 ppid=1 pid=3101 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:45:26.852000 audit[3101]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5d9fab0 a2=3 a3=1 items=0 ppid=1 pid=3101 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:45:26.852000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:45:26.924649 kernel: audit: type=1327 audit(1696279526.852:1151): proctitle=737368643A20636F7265205B707269765D Oct 2 20:45:26.925063 systemd-logind[1364]: New session 13 of user core. Oct 2 20:45:26.925457 systemd[1]: Started session-13.scope. Oct 2 20:45:26.928000 audit[3101]: USER_START pid=3101 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:26.954000 audit[3103]: CRED_ACQ pid=3103 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:26.976350 kernel: audit: type=1105 audit(1696279526.928:1152): pid=3101 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:26.976446 kernel: audit: type=1103 audit(1696279526.954:1153): pid=3103 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:27.275374 sshd[3101]: pam_unix(sshd:session): session closed for user core Oct 2 20:45:27.275000 audit[3101]: USER_END pid=3101 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:27.302751 systemd[1]: sshd@10-10.200.20.29:22-10.200.12.6:60126.service: Deactivated successfully. Oct 2 20:45:27.275000 audit[3101]: CRED_DISP pid=3101 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:27.303407 kernel: audit: type=1106 audit(1696279527.275:1154): pid=3101 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:27.303589 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:45:27.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.29:22-10.200.12.6:60126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:27.327715 systemd-logind[1364]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:45:27.328206 kernel: audit: type=1104 audit(1696279527.275:1155): pid=3101 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:27.328579 systemd-logind[1364]: Removed session 13. Oct 2 20:45:29.367104 kubelet[2480]: E1002 20:45:29.367080 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:34.229262 kubelet[2480]: E1002 20:45:34.229226 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:45:34.368007 kubelet[2480]: E1002 20:45:34.367975 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:37.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.29:22-10.200.12.6:58912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:37.344291 systemd[1]: Started sshd@11-10.200.20.29:22-10.200.12.6:58912.service. Oct 2 20:45:37.349273 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:45:37.349372 kernel: audit: type=1130 audit(1696279537.343:1157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.29:22-10.200.12.6:58912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:37.748000 audit[3113]: USER_ACCT pid=3113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:37.750288 sshd[3113]: Accepted publickey for core from 10.200.12.6 port 58912 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:45:37.773928 sshd[3113]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:45:37.774206 kernel: audit: type=1101 audit(1696279537.748:1158): pid=3113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:37.772000 audit[3113]: CRED_ACQ pid=3113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:37.810541 kernel: audit: type=1103 audit(1696279537.772:1159): pid=3113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:37.810679 kernel: audit: type=1006 audit(1696279537.772:1160): pid=3113 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 20:45:37.772000 audit[3113]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf022250 a2=3 a3=1 items=0 ppid=1 pid=3113 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:45:37.834477 kernel: audit: type=1300 audit(1696279537.772:1160): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf022250 a2=3 a3=1 items=0 ppid=1 pid=3113 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:45:37.772000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:45:37.842867 kernel: audit: type=1327 audit(1696279537.772:1160): proctitle=737368643A20636F7265205B707269765D Oct 2 20:45:37.846010 systemd[1]: Started session-14.scope. Oct 2 20:45:37.846518 systemd-logind[1364]: New session 14 of user core. Oct 2 20:45:37.849000 audit[3113]: USER_START pid=3113 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:37.874000 audit[3115]: CRED_ACQ pid=3115 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:37.896530 kernel: audit: type=1105 audit(1696279537.849:1161): pid=3113 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:37.896646 kernel: audit: type=1103 audit(1696279537.874:1162): pid=3115 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:38.185479 sshd[3113]: pam_unix(sshd:session): session closed for user core Oct 2 20:45:38.185000 audit[3113]: USER_END pid=3113 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:38.188941 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:45:38.189810 systemd[1]: sshd@11-10.200.20.29:22-10.200.12.6:58912.service: Deactivated successfully. Oct 2 20:45:38.186000 audit[3113]: CRED_DISP pid=3113 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:38.214907 systemd-logind[1364]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:45:38.215964 systemd-logind[1364]: Removed session 14. Oct 2 20:45:38.233105 kernel: audit: type=1106 audit(1696279538.185:1163): pid=3113 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:38.233605 kernel: audit: type=1104 audit(1696279538.186:1164): pid=3113 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:38.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.29:22-10.200.12.6:58912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:39.368637 kubelet[2480]: E1002 20:45:39.368605 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:44.369799 kubelet[2480]: E1002 20:45:44.369768 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:48.228439 kubelet[2480]: E1002 20:45:48.228409 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:45:48.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.29:22-10.200.12.6:57958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:48.253380 systemd[1]: Started sshd@12-10.200.20.29:22-10.200.12.6:57958.service. Oct 2 20:45:48.259057 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:45:48.259127 kernel: audit: type=1130 audit(1696279548.252:1166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.29:22-10.200.12.6:57958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:48.652000 audit[3127]: USER_ACCT pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:48.653543 sshd[3127]: Accepted publickey for core from 10.200.12.6 port 57958 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:45:48.655713 sshd[3127]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:45:48.654000 audit[3127]: CRED_ACQ pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:48.697651 kernel: audit: type=1101 audit(1696279548.652:1167): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:48.697777 kernel: audit: type=1103 audit(1696279548.654:1168): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:48.711806 kernel: audit: type=1006 audit(1696279548.654:1169): pid=3127 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:45:48.654000 audit[3127]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe905ffd0 a2=3 a3=1 items=0 ppid=1 pid=3127 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:45:48.735809 kernel: audit: type=1300 audit(1696279548.654:1169): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe905ffd0 a2=3 a3=1 items=0 ppid=1 pid=3127 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:45:48.735900 kernel: audit: type=1327 audit(1696279548.654:1169): proctitle=737368643A20636F7265205B707269765D Oct 2 20:45:48.654000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:45:48.738753 systemd[1]: Started session-15.scope. Oct 2 20:45:48.740033 systemd-logind[1364]: New session 15 of user core. Oct 2 20:45:48.743000 audit[3127]: USER_START pid=3127 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:48.747000 audit[3129]: CRED_ACQ pid=3129 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:48.791226 kernel: audit: type=1105 audit(1696279548.743:1170): pid=3127 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:48.791321 kernel: audit: type=1103 audit(1696279548.747:1171): pid=3129 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:49.071309 sshd[3127]: pam_unix(sshd:session): session closed for user core Oct 2 20:45:49.071000 audit[3127]: USER_END pid=3127 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:49.075578 systemd-logind[1364]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:45:49.076704 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:45:49.077853 systemd-logind[1364]: Removed session 15. Oct 2 20:45:49.078452 systemd[1]: sshd@12-10.200.20.29:22-10.200.12.6:57958.service: Deactivated successfully. Oct 2 20:45:49.071000 audit[3127]: CRED_DISP pid=3127 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:49.119170 kernel: audit: type=1106 audit(1696279549.071:1172): pid=3127 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:49.119371 kernel: audit: type=1104 audit(1696279549.071:1173): pid=3127 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:49.077000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.29:22-10.200.12.6:57958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:49.372766 kubelet[2480]: E1002 20:45:49.370896 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:54.372098 kubelet[2480]: E1002 20:45:54.372029 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:54.788598 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:45:54.788738 kernel: audit: type=1400 audit(1696279554.783:1175): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:54.783000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:54.788000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:54.831838 kernel: audit: type=1400 audit(1696279554.788:1176): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:54.831953 kernel: audit: type=1300 audit(1696279554.788:1176): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40025dcf60 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:45:54.788000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40025dcf60 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:45:54.788000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:54.883310 kernel: audit: type=1327 audit(1696279554.788:1176): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:54.883428 kernel: audit: type=1300 audit(1696279554.783:1175): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001f50420 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:45:54.783000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001f50420 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:45:54.783000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:54.934881 kernel: audit: type=1327 audit(1696279554.783:1175): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:55.180000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:55.180000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:55.232633 kernel: audit: type=1400 audit(1696279555.180:1178): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:55.232746 kernel: audit: type=1400 audit(1696279555.180:1177): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:55.180000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400a70a420 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:45:55.263588 kernel: audit: type=1300 audit(1696279555.180:1178): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400a70a420 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:45:55.180000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400dcdd700 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:45:55.294423 kernel: audit: type=1300 audit(1696279555.180:1177): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400dcdd700 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:45:55.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:45:55.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:45:55.206000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:55.206000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a60e930 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:45:55.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:45:55.206000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:55.206000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a70a4b0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:45:55.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:45:55.206000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:55.206000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a60e960 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:45:55.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:45:55.206000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:55.206000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400dcdd720 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:45:55.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:45:59.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.29:22-10.200.12.6:56050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:59.140148 systemd[1]: Started sshd@13-10.200.20.29:22-10.200.12.6:56050.service. Oct 2 20:45:59.229936 kubelet[2480]: E1002 20:45:59.229894 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:45:59.373894 kubelet[2480]: E1002 20:45:59.373871 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:59.536000 audit[3140]: USER_ACCT pid=3140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:59.537694 sshd[3140]: Accepted publickey for core from 10.200.12.6 port 56050 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:45:59.538000 audit[3140]: CRED_ACQ pid=3140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:59.538000 audit[3140]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff24c6470 a2=3 a3=1 items=0 ppid=1 pid=3140 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:45:59.538000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:45:59.540657 sshd[3140]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:45:59.545975 systemd[1]: Started session-16.scope. Oct 2 20:45:59.546392 systemd-logind[1364]: New session 16 of user core. Oct 2 20:45:59.549000 audit[3140]: USER_START pid=3140 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:59.552000 audit[3144]: CRED_ACQ pid=3144 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:59.903151 sshd[3140]: pam_unix(sshd:session): session closed for user core Oct 2 20:45:59.937973 kernel: kauditd_printk_skb: 22 callbacks suppressed Oct 2 20:45:59.938041 kernel: audit: type=1106 audit(1696279559.902:1189): pid=3140 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:59.902000 audit[3140]: USER_END pid=3140 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:59.910085 systemd[1]: sshd@13-10.200.20.29:22-10.200.12.6:56050.service: Deactivated successfully. Oct 2 20:45:59.910885 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:45:59.911871 systemd-logind[1364]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:45:59.903000 audit[3140]: CRED_DISP pid=3140 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:59.912681 systemd-logind[1364]: Removed session 16. Oct 2 20:45:59.961734 kernel: audit: type=1104 audit(1696279559.903:1190): pid=3140 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:45:59.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.29:22-10.200.12.6:56050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:45:59.985332 kernel: audit: type=1131 audit(1696279559.909:1191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.29:22-10.200.12.6:56050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:04.375362 kubelet[2480]: E1002 20:46:04.375337 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:09.376878 kubelet[2480]: E1002 20:46:09.376847 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:09.972337 systemd[1]: Started sshd@14-10.200.20.29:22-10.200.12.6:57248.service. Oct 2 20:46:09.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.29:22-10.200.12.6:57248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:09.995219 kernel: audit: type=1130 audit(1696279569.971:1192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.29:22-10.200.12.6:57248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:10.230480 env[1384]: time="2023-10-02T20:46:10.230375666Z" level=info msg="CreateContainer within sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:46:10.257481 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3688912866.mount: Deactivated successfully. Oct 2 20:46:10.272745 env[1384]: time="2023-10-02T20:46:10.272635638Z" level=info msg="CreateContainer within sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097\"" Oct 2 20:46:10.273223 env[1384]: time="2023-10-02T20:46:10.273160237Z" level=info msg="StartContainer for \"73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097\"" Oct 2 20:46:10.296466 systemd[1]: Started cri-containerd-73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097.scope. Oct 2 20:46:10.309909 systemd[1]: cri-containerd-73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097.scope: Deactivated successfully. Oct 2 20:46:10.341852 env[1384]: time="2023-10-02T20:46:10.341803581Z" level=info msg="shim disconnected" id=73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097 Oct 2 20:46:10.342069 env[1384]: time="2023-10-02T20:46:10.342051941Z" level=warning msg="cleaning up after shim disconnected" id=73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097 namespace=k8s.io Oct 2 20:46:10.342144 env[1384]: time="2023-10-02T20:46:10.342132021Z" level=info msg="cleaning up dead shim" Oct 2 20:46:10.355214 env[1384]: time="2023-10-02T20:46:10.355154107Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:46:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3180 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:46:10Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:46:10.355627 env[1384]: time="2023-10-02T20:46:10.355572786Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:46:10.356069 env[1384]: time="2023-10-02T20:46:10.356038585Z" level=error msg="Failed to pipe stderr of container \"73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097\"" error="reading from a closed fifo" Oct 2 20:46:10.356405 env[1384]: time="2023-10-02T20:46:10.356156945Z" level=error msg="Failed to pipe stdout of container \"73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097\"" error="reading from a closed fifo" Oct 2 20:46:10.361696 env[1384]: time="2023-10-02T20:46:10.361651091Z" level=error msg="StartContainer for \"73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:46:10.362309 kubelet[2480]: E1002 20:46:10.361986 2480 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097" Oct 2 20:46:10.362309 kubelet[2480]: E1002 20:46:10.362103 2480 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:46:10.362309 kubelet[2480]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:46:10.362309 kubelet[2480]: rm /hostbin/cilium-mount Oct 2 20:46:10.362309 kubelet[2480]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-68l7k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:46:10.362309 kubelet[2480]: E1002 20:46:10.362139 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:46:10.373000 audit[3155]: USER_ACCT pid=3155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:10.374680 sshd[3155]: Accepted publickey for core from 10.200.12.6 port 57248 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:46:10.376905 sshd[3155]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:46:10.375000 audit[3155]: CRED_ACQ pid=3155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:10.421702 kernel: audit: type=1101 audit(1696279570.373:1193): pid=3155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:10.421869 kernel: audit: type=1103 audit(1696279570.375:1194): pid=3155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:10.438217 kernel: audit: type=1006 audit(1696279570.375:1195): pid=3155 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 20:46:10.437975 systemd-logind[1364]: New session 17 of user core. Oct 2 20:46:10.375000 audit[3155]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc2d5d20 a2=3 a3=1 items=0 ppid=1 pid=3155 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:46:10.439302 systemd[1]: Started session-17.scope. Oct 2 20:46:10.464623 kernel: audit: type=1300 audit(1696279570.375:1195): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc2d5d20 a2=3 a3=1 items=0 ppid=1 pid=3155 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:46:10.375000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:46:10.473925 kernel: audit: type=1327 audit(1696279570.375:1195): proctitle=737368643A20636F7265205B707269765D Oct 2 20:46:10.477411 kernel: audit: type=1105 audit(1696279570.473:1196): pid=3155 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:10.473000 audit[3155]: USER_START pid=3155 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:10.473000 audit[3192]: CRED_ACQ pid=3192 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:10.522207 kernel: audit: type=1103 audit(1696279570.473:1197): pid=3192 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:10.610684 kubelet[2480]: I1002 20:46:10.610651 2480 scope.go:115] "RemoveContainer" containerID="21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df" Oct 2 20:46:10.612920 kubelet[2480]: I1002 20:46:10.611095 2480 scope.go:115] "RemoveContainer" containerID="21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df" Oct 2 20:46:10.615597 env[1384]: time="2023-10-02T20:46:10.615562243Z" level=info msg="RemoveContainer for \"21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df\"" Oct 2 20:46:10.616355 env[1384]: time="2023-10-02T20:46:10.616333921Z" level=info msg="RemoveContainer for \"21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df\"" Oct 2 20:46:10.616570 env[1384]: time="2023-10-02T20:46:10.616515560Z" level=error msg="RemoveContainer for \"21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df\" failed" error="failed to set removing state for container \"21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df\": container is already in removing state" Oct 2 20:46:10.616801 kubelet[2480]: E1002 20:46:10.616784 2480 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df\": container is already in removing state" containerID="21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df" Oct 2 20:46:10.616908 kubelet[2480]: E1002 20:46:10.616896 2480 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df": container is already in removing state; Skipping pod "cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)" Oct 2 20:46:10.617257 kubelet[2480]: E1002 20:46:10.617242 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:46:10.628377 env[1384]: time="2023-10-02T20:46:10.628342170Z" level=info msg="RemoveContainer for \"21c187e6e0b905748f15c4f0cd4b0a409ab462179bdf46b18bb2a6659b8e90df\" returns successfully" Oct 2 20:46:10.783350 sshd[3155]: pam_unix(sshd:session): session closed for user core Oct 2 20:46:10.783000 audit[3155]: USER_END pid=3155 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:10.786548 systemd-logind[1364]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:46:10.787495 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:46:10.788443 systemd-logind[1364]: Removed session 17. Oct 2 20:46:10.788903 systemd[1]: sshd@14-10.200.20.29:22-10.200.12.6:57248.service: Deactivated successfully. Oct 2 20:46:10.783000 audit[3155]: CRED_DISP pid=3155 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:10.832401 kernel: audit: type=1106 audit(1696279570.783:1198): pid=3155 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:10.832532 kernel: audit: type=1104 audit(1696279570.783:1199): pid=3155 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:10.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.29:22-10.200.12.6:57248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:11.253085 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097-rootfs.mount: Deactivated successfully. Oct 2 20:46:11.763000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:11.763000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:11.763000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400286d4c0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:46:11.763000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:11.763000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40029339e0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:46:11.763000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:11.763000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:11.763000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002933a00 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:46:11.763000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:11.763000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400286d5e0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:46:11.763000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:11.763000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:13.468843 kubelet[2480]: W1002 20:46:13.468807 2480 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5db1c46f_8948_4fc2_b38e_819dab56fed0.slice/cri-containerd-73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097.scope WatchSource:0}: task 73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097 not found: not found Oct 2 20:46:14.377989 kubelet[2480]: E1002 20:46:14.377944 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:19.379030 kubelet[2480]: E1002 20:46:19.379006 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:20.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.29:22-10.200.12.6:51390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:20.850122 systemd[1]: Started sshd@15-10.200.20.29:22-10.200.12.6:51390.service. Oct 2 20:46:20.855396 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:46:20.855495 kernel: audit: type=1130 audit(1696279580.849:1205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.29:22-10.200.12.6:51390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:21.256000 audit[3205]: USER_ACCT pid=3205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:21.258473 sshd[3205]: Accepted publickey for core from 10.200.12.6 port 51390 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:46:21.283842 sshd[3205]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:46:21.284202 kernel: audit: type=1101 audit(1696279581.256:1206): pid=3205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:21.282000 audit[3205]: CRED_ACQ pid=3205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:21.321979 kernel: audit: type=1103 audit(1696279581.282:1207): pid=3205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:21.322158 kernel: audit: type=1006 audit(1696279581.282:1208): pid=3205 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 20:46:21.282000 audit[3205]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0a835d0 a2=3 a3=1 items=0 ppid=1 pid=3205 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:46:21.346580 kernel: audit: type=1300 audit(1696279581.282:1208): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0a835d0 a2=3 a3=1 items=0 ppid=1 pid=3205 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:46:21.282000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:46:21.354907 kernel: audit: type=1327 audit(1696279581.282:1208): proctitle=737368643A20636F7265205B707269765D Oct 2 20:46:21.358414 systemd[1]: Started session-18.scope. Oct 2 20:46:21.358902 systemd-logind[1364]: New session 18 of user core. Oct 2 20:46:21.361000 audit[3205]: USER_START pid=3205 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:21.365000 audit[3207]: CRED_ACQ pid=3207 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:21.409113 kernel: audit: type=1105 audit(1696279581.361:1209): pid=3205 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:21.409244 kernel: audit: type=1103 audit(1696279581.365:1210): pid=3207 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:21.674000 audit[3205]: USER_END pid=3205 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:21.675047 sshd[3205]: pam_unix(sshd:session): session closed for user core Oct 2 20:46:21.678953 systemd[1]: sshd@15-10.200.20.29:22-10.200.12.6:51390.service: Deactivated successfully. Oct 2 20:46:21.679720 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:46:21.702459 systemd-logind[1364]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:46:21.676000 audit[3205]: CRED_DISP pid=3205 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:21.724896 kernel: audit: type=1106 audit(1696279581.674:1211): pid=3205 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:21.725036 kernel: audit: type=1104 audit(1696279581.676:1212): pid=3205 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:21.725157 systemd-logind[1364]: Removed session 18. Oct 2 20:46:21.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.29:22-10.200.12.6:51390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:24.381070 kubelet[2480]: E1002 20:46:24.381016 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:25.229827 kubelet[2480]: E1002 20:46:25.229799 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:46:29.382534 kubelet[2480]: E1002 20:46:29.382508 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:31.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.29:22-10.200.12.6:34658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:31.749627 systemd[1]: Started sshd@16-10.200.20.29:22-10.200.12.6:34658.service. Oct 2 20:46:31.755339 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:46:31.755427 kernel: audit: type=1130 audit(1696279591.748:1214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.29:22-10.200.12.6:34658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:32.193000 audit[3219]: USER_ACCT pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:32.199367 sshd[3219]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:46:32.200113 sshd[3219]: Accepted publickey for core from 10.200.12.6 port 34658 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:46:32.196000 audit[3219]: CRED_ACQ pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:32.246426 kernel: audit: type=1101 audit(1696279592.193:1215): pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:32.246572 kernel: audit: type=1103 audit(1696279592.196:1216): pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:32.196000 audit[3219]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd170a550 a2=3 a3=1 items=0 ppid=1 pid=3219 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:46:32.289024 kernel: audit: type=1006 audit(1696279592.196:1217): pid=3219 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 20:46:32.291403 kernel: audit: type=1300 audit(1696279592.196:1217): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd170a550 a2=3 a3=1 items=0 ppid=1 pid=3219 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:46:32.290742 systemd-logind[1364]: New session 19 of user core. Oct 2 20:46:32.290844 systemd[1]: Started session-19.scope. Oct 2 20:46:32.196000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:46:32.300152 kernel: audit: type=1327 audit(1696279592.196:1217): proctitle=737368643A20636F7265205B707269765D Oct 2 20:46:32.302000 audit[3219]: USER_START pid=3219 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:32.302000 audit[3224]: CRED_ACQ pid=3224 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:32.357998 kernel: audit: type=1105 audit(1696279592.302:1218): pid=3219 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:32.358112 kernel: audit: type=1103 audit(1696279592.302:1219): pid=3224 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:32.646470 sshd[3219]: pam_unix(sshd:session): session closed for user core Oct 2 20:46:32.647000 audit[3219]: USER_END pid=3219 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:32.650998 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:46:32.651822 systemd[1]: sshd@16-10.200.20.29:22-10.200.12.6:34658.service: Deactivated successfully. Oct 2 20:46:32.648000 audit[3219]: CRED_DISP pid=3219 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:32.676257 systemd-logind[1364]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:46:32.697931 kernel: audit: type=1106 audit(1696279592.647:1220): pid=3219 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:32.698023 kernel: audit: type=1104 audit(1696279592.648:1221): pid=3219 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:32.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.29:22-10.200.12.6:34658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:32.698673 systemd-logind[1364]: Removed session 19. Oct 2 20:46:32.749553 systemd[1]: Started sshd@17-10.200.20.29:22-10.200.12.6:34672.service. Oct 2 20:46:32.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.29:22-10.200.12.6:34672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:33.183000 audit[3235]: USER_ACCT pid=3235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:33.185033 sshd[3235]: Accepted publickey for core from 10.200.12.6 port 34672 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:46:33.185000 audit[3235]: CRED_ACQ pid=3235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:33.185000 audit[3235]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9b58930 a2=3 a3=1 items=0 ppid=1 pid=3235 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:46:33.185000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:46:33.186983 sshd[3235]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:46:33.192030 systemd[1]: Started session-20.scope. Oct 2 20:46:33.192359 systemd-logind[1364]: New session 20 of user core. Oct 2 20:46:33.195000 audit[3235]: USER_START pid=3235 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:33.198000 audit[3237]: CRED_ACQ pid=3237 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:34.247382 sshd[3235]: pam_unix(sshd:session): session closed for user core Oct 2 20:46:34.247000 audit[3235]: USER_END pid=3235 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:34.247000 audit[3235]: CRED_DISP pid=3235 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:34.250331 systemd[1]: sshd@17-10.200.20.29:22-10.200.12.6:34672.service: Deactivated successfully. Oct 2 20:46:34.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.29:22-10.200.12.6:34672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:34.251076 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:46:34.251720 systemd-logind[1364]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:46:34.252731 systemd-logind[1364]: Removed session 20. Oct 2 20:46:34.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.29:22-10.200.12.6:34688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:34.315459 systemd[1]: Started sshd@18-10.200.20.29:22-10.200.12.6:34688.service. Oct 2 20:46:34.384463 kubelet[2480]: E1002 20:46:34.384430 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:34.714000 audit[3245]: USER_ACCT pid=3245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:34.715549 sshd[3245]: Accepted publickey for core from 10.200.12.6 port 34688 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:46:34.715000 audit[3245]: CRED_ACQ pid=3245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:34.715000 audit[3245]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd206c1c0 a2=3 a3=1 items=0 ppid=1 pid=3245 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:46:34.715000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:46:34.717614 sshd[3245]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:46:34.722156 systemd-logind[1364]: New session 21 of user core. Oct 2 20:46:34.722659 systemd[1]: Started session-21.scope. Oct 2 20:46:34.726000 audit[3245]: USER_START pid=3245 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:34.729000 audit[3247]: CRED_ACQ pid=3247 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:35.083423 sshd[3245]: pam_unix(sshd:session): session closed for user core Oct 2 20:46:35.083000 audit[3245]: USER_END pid=3245 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:35.083000 audit[3245]: CRED_DISP pid=3245 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:35.086366 systemd-logind[1364]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:46:35.086366 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:46:35.087005 systemd[1]: sshd@18-10.200.20.29:22-10.200.12.6:34688.service: Deactivated successfully. Oct 2 20:46:35.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.29:22-10.200.12.6:34688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:35.088157 systemd-logind[1364]: Removed session 21. Oct 2 20:46:38.228930 kubelet[2480]: E1002 20:46:38.228890 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:46:39.385406 kubelet[2480]: E1002 20:46:39.385374 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:44.386891 kubelet[2480]: E1002 20:46:44.386864 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:45.153055 systemd[1]: Started sshd@19-10.200.20.29:22-10.200.12.6:58978.service. Oct 2 20:46:45.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.29:22-10.200.12.6:58978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:45.159191 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 20:46:45.159341 kernel: audit: type=1130 audit(1696279605.152:1241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.29:22-10.200.12.6:58978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:45.553000 audit[3264]: USER_ACCT pid=3264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:45.559815 sshd[3264]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:46:45.562160 sshd[3264]: Accepted publickey for core from 10.200.12.6 port 58978 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:46:45.558000 audit[3264]: CRED_ACQ pid=3264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:45.600879 kernel: audit: type=1101 audit(1696279605.553:1242): pid=3264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:45.601006 kernel: audit: type=1103 audit(1696279605.558:1243): pid=3264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:45.601038 kernel: audit: type=1006 audit(1696279605.558:1244): pid=3264 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 20:46:45.558000 audit[3264]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebae5000 a2=3 a3=1 items=0 ppid=1 pid=3264 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:46:45.641587 kernel: audit: type=1300 audit(1696279605.558:1244): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebae5000 a2=3 a3=1 items=0 ppid=1 pid=3264 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:46:45.558000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:46:45.644604 systemd[1]: Started session-22.scope. Oct 2 20:46:45.650140 kernel: audit: type=1327 audit(1696279605.558:1244): proctitle=737368643A20636F7265205B707269765D Oct 2 20:46:45.650493 systemd-logind[1364]: New session 22 of user core. Oct 2 20:46:45.654000 audit[3264]: USER_START pid=3264 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:45.683000 audit[3266]: CRED_ACQ pid=3266 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:45.708595 kernel: audit: type=1105 audit(1696279605.654:1245): pid=3264 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:45.708715 kernel: audit: type=1103 audit(1696279605.683:1246): pid=3266 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:45.998378 sshd[3264]: pam_unix(sshd:session): session closed for user core Oct 2 20:46:45.998000 audit[3264]: USER_END pid=3264 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:46.000000 audit[3264]: CRED_DISP pid=3264 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:46.027564 systemd[1]: sshd@19-10.200.20.29:22-10.200.12.6:58978.service: Deactivated successfully. Oct 2 20:46:46.028392 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:46:46.049887 kernel: audit: type=1106 audit(1696279605.998:1247): pid=3264 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:46.049997 kernel: audit: type=1104 audit(1696279606.000:1248): pid=3264 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:46.050431 systemd-logind[1364]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:46:46.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.29:22-10.200.12.6:58978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:46.051606 systemd-logind[1364]: Removed session 22. Oct 2 20:46:49.228848 kubelet[2480]: E1002 20:46:49.228814 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:46:49.388156 kubelet[2480]: E1002 20:46:49.388128 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:54.389398 kubelet[2480]: E1002 20:46:54.389362 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:54.789000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:54.795494 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:46:54.795618 kernel: audit: type=1400 audit(1696279614.789:1251): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:54.789000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:54.842870 kernel: audit: type=1400 audit(1696279614.789:1250): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:54.842998 kernel: audit: type=1300 audit(1696279614.789:1250): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40006abc00 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:46:54.789000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40006abc00 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:46:54.789000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:54.897949 kernel: audit: type=1327 audit(1696279614.789:1250): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:54.898069 kernel: audit: type=1300 audit(1696279614.789:1251): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ccfdd0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:46:54.789000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ccfdd0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:46:54.789000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:54.952142 kernel: audit: type=1327 audit(1696279614.789:1251): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:55.182000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:55.182000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:55.229294 kernel: audit: type=1400 audit(1696279615.182:1253): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:55.229417 kernel: audit: type=1400 audit(1696279615.182:1252): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:55.182000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007314c80 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:46:55.259079 kernel: audit: type=1300 audit(1696279615.182:1253): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007314c80 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:46:55.259229 kernel: audit: type=1327 audit(1696279615.182:1253): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:46:55.182000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:46:55.182000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40087f85a0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:46:55.182000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:46:55.207000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:55.207000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40087f8660 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:46:55.207000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:46:55.207000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:55.207000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40087f8690 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:46:55.207000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:46:55.208000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:55.208000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40087f8870 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:46:55.208000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:46:55.208000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:55.208000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007314ca0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:46:55.208000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:46:56.068786 systemd[1]: Started sshd@20-10.200.20.29:22-10.200.12.6:40168.service. Oct 2 20:46:56.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.29:22-10.200.12.6:40168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:56.470000 audit[3277]: USER_ACCT pid=3277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:56.472021 sshd[3277]: Accepted publickey for core from 10.200.12.6 port 40168 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:46:56.472000 audit[3277]: CRED_ACQ pid=3277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:56.472000 audit[3277]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9b0c710 a2=3 a3=1 items=0 ppid=1 pid=3277 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:46:56.472000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:46:56.474001 sshd[3277]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:46:56.478551 systemd[1]: Started session-23.scope. Oct 2 20:46:56.478851 systemd-logind[1364]: New session 23 of user core. Oct 2 20:46:56.481000 audit[3277]: USER_START pid=3277 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:56.484000 audit[3279]: CRED_ACQ pid=3279 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:56.850398 sshd[3277]: pam_unix(sshd:session): session closed for user core Oct 2 20:46:56.850000 audit[3277]: USER_END pid=3277 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:56.850000 audit[3277]: CRED_DISP pid=3277 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:46:56.853643 systemd-logind[1364]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:46:56.854804 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:46:56.855507 systemd[1]: sshd@20-10.200.20.29:22-10.200.12.6:40168.service: Deactivated successfully. Oct 2 20:46:56.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.29:22-10.200.12.6:40168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:46:56.856677 systemd-logind[1364]: Removed session 23. Oct 2 20:46:59.389680 kubelet[2480]: E1002 20:46:59.389659 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:03.229364 kubelet[2480]: E1002 20:47:03.229317 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:47:04.391577 kubelet[2480]: E1002 20:47:04.391543 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:06.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.29:22-10.200.12.6:46706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:06.925119 systemd[1]: Started sshd@21-10.200.20.29:22-10.200.12.6:46706.service. Oct 2 20:47:06.930517 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:47:06.930599 kernel: audit: type=1130 audit(1696279626.924:1267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.29:22-10.200.12.6:46706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:07.360000 audit[3291]: USER_ACCT pid=3291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:07.362281 sshd[3291]: Accepted publickey for core from 10.200.12.6 port 46706 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:47:07.364759 sshd[3291]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:47:07.363000 audit[3291]: CRED_ACQ pid=3291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:07.409115 kernel: audit: type=1101 audit(1696279627.360:1268): pid=3291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:07.409288 kernel: audit: type=1103 audit(1696279627.363:1269): pid=3291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:07.409462 kernel: audit: type=1006 audit(1696279627.363:1270): pid=3291 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:47:07.363000 audit[3291]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc55ac4c0 a2=3 a3=1 items=0 ppid=1 pid=3291 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:47:07.427050 systemd[1]: Started session-24.scope. Oct 2 20:47:07.428695 systemd-logind[1364]: New session 24 of user core. Oct 2 20:47:07.449879 kernel: audit: type=1300 audit(1696279627.363:1270): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc55ac4c0 a2=3 a3=1 items=0 ppid=1 pid=3291 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:47:07.363000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:47:07.458869 kernel: audit: type=1327 audit(1696279627.363:1270): proctitle=737368643A20636F7265205B707269765D Oct 2 20:47:07.449000 audit[3291]: USER_START pid=3291 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:07.484723 kernel: audit: type=1105 audit(1696279627.449:1271): pid=3291 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:07.453000 audit[3293]: CRED_ACQ pid=3293 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:07.510758 kernel: audit: type=1103 audit(1696279627.453:1272): pid=3293 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:07.781596 sshd[3291]: pam_unix(sshd:session): session closed for user core Oct 2 20:47:07.782000 audit[3291]: USER_END pid=3291 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:07.785347 systemd-logind[1364]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:47:07.786440 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:47:07.787599 systemd[1]: sshd@21-10.200.20.29:22-10.200.12.6:46706.service: Deactivated successfully. Oct 2 20:47:07.789089 systemd-logind[1364]: Removed session 24. Oct 2 20:47:07.782000 audit[3291]: CRED_DISP pid=3291 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:07.832277 kernel: audit: type=1106 audit(1696279627.782:1273): pid=3291 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:07.832373 kernel: audit: type=1104 audit(1696279627.782:1274): pid=3291 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:07.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.29:22-10.200.12.6:46706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:09.392337 kubelet[2480]: E1002 20:47:09.392314 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:11.764000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:11.764000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bdaca0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:47:11.764000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:11.764000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:11.764000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bdacc0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:47:11.764000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:11.765000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:11.765000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c63f60 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:47:11.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:11.765000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:11.765000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c63fa0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:47:11.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:14.393654 kubelet[2480]: E1002 20:47:14.393620 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:15.228708 kubelet[2480]: E1002 20:47:15.228664 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:47:17.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.29:22-10.200.12.6:32946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:17.850028 systemd[1]: Started sshd@22-10.200.20.29:22-10.200.12.6:32946.service. Oct 2 20:47:17.855301 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:47:17.855428 kernel: audit: type=1130 audit(1696279637.848:1280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.29:22-10.200.12.6:32946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:18.251000 audit[3305]: USER_ACCT pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:18.252936 sshd[3305]: Accepted publickey for core from 10.200.12.6 port 32946 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:47:18.278122 sshd[3305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:47:18.278461 kernel: audit: type=1101 audit(1696279638.251:1281): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:18.278502 kernel: audit: type=1103 audit(1696279638.276:1282): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:18.276000 audit[3305]: CRED_ACQ pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:18.315503 kernel: audit: type=1006 audit(1696279638.276:1283): pid=3305 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 20:47:18.276000 audit[3305]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe596e7a0 a2=3 a3=1 items=0 ppid=1 pid=3305 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:47:18.339915 kernel: audit: type=1300 audit(1696279638.276:1283): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe596e7a0 a2=3 a3=1 items=0 ppid=1 pid=3305 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:47:18.276000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:47:18.343428 systemd[1]: Started session-25.scope. Oct 2 20:47:18.344490 systemd-logind[1364]: New session 25 of user core. Oct 2 20:47:18.348972 kernel: audit: type=1327 audit(1696279638.276:1283): proctitle=737368643A20636F7265205B707269765D Oct 2 20:47:18.348000 audit[3305]: USER_START pid=3305 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:18.352000 audit[3307]: CRED_ACQ pid=3307 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:18.398114 kernel: audit: type=1105 audit(1696279638.348:1284): pid=3305 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:18.398280 kernel: audit: type=1103 audit(1696279638.352:1285): pid=3307 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:18.663372 sshd[3305]: pam_unix(sshd:session): session closed for user core Oct 2 20:47:18.663000 audit[3305]: USER_END pid=3305 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:18.667237 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:47:18.668031 systemd[1]: sshd@22-10.200.20.29:22-10.200.12.6:32946.service: Deactivated successfully. Oct 2 20:47:18.664000 audit[3305]: CRED_DISP pid=3305 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:18.713859 kernel: audit: type=1106 audit(1696279638.663:1286): pid=3305 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:18.713973 kernel: audit: type=1104 audit(1696279638.664:1287): pid=3305 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:18.714153 systemd-logind[1364]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:47:18.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.29:22-10.200.12.6:32946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:18.714922 systemd-logind[1364]: Removed session 25. Oct 2 20:47:19.396651 kubelet[2480]: E1002 20:47:19.396606 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:24.397526 kubelet[2480]: E1002 20:47:24.397353 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:26.228985 kubelet[2480]: E1002 20:47:26.228951 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:47:28.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.29:22-10.200.12.6:53056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:28.734195 systemd[1]: Started sshd@23-10.200.20.29:22-10.200.12.6:53056.service. Oct 2 20:47:28.739578 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:47:28.739675 kernel: audit: type=1130 audit(1696279648.733:1289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.29:22-10.200.12.6:53056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:29.132000 audit[3317]: USER_ACCT pid=3317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:29.133576 sshd[3317]: Accepted publickey for core from 10.200.12.6 port 53056 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:47:29.135881 sshd[3317]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:47:29.134000 audit[3317]: CRED_ACQ pid=3317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:29.160060 systemd[1]: Started session-26.scope. Oct 2 20:47:29.161014 systemd-logind[1364]: New session 26 of user core. Oct 2 20:47:29.177928 kernel: audit: type=1101 audit(1696279649.132:1290): pid=3317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:29.178021 kernel: audit: type=1103 audit(1696279649.134:1291): pid=3317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:29.191989 kernel: audit: type=1006 audit(1696279649.134:1292): pid=3317 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:47:29.192190 kernel: audit: type=1300 audit(1696279649.134:1292): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd39ada30 a2=3 a3=1 items=0 ppid=1 pid=3317 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:47:29.134000 audit[3317]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd39ada30 a2=3 a3=1 items=0 ppid=1 pid=3317 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:47:29.134000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:47:29.223894 kernel: audit: type=1327 audit(1696279649.134:1292): proctitle=737368643A20636F7265205B707269765D Oct 2 20:47:29.224016 kernel: audit: type=1105 audit(1696279649.178:1293): pid=3317 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:29.178000 audit[3317]: USER_START pid=3317 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:29.181000 audit[3319]: CRED_ACQ pid=3319 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:29.271079 kernel: audit: type=1103 audit(1696279649.181:1294): pid=3319 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:29.398799 kubelet[2480]: E1002 20:47:29.398682 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:29.530384 sshd[3317]: pam_unix(sshd:session): session closed for user core Oct 2 20:47:29.530000 audit[3317]: USER_END pid=3317 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:29.533798 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:47:29.534628 systemd[1]: sshd@23-10.200.20.29:22-10.200.12.6:53056.service: Deactivated successfully. Oct 2 20:47:29.531000 audit[3317]: CRED_DISP pid=3317 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:29.578564 kernel: audit: type=1106 audit(1696279649.530:1295): pid=3317 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:29.578665 kernel: audit: type=1104 audit(1696279649.531:1296): pid=3317 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:29.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.29:22-10.200.12.6:53056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:29.578759 systemd-logind[1364]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:47:29.579573 systemd-logind[1364]: Removed session 26. Oct 2 20:47:34.399346 kubelet[2480]: E1002 20:47:34.399317 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:39.400543 kubelet[2480]: E1002 20:47:39.400517 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:39.604391 systemd[1]: Started sshd@24-10.200.20.29:22-10.200.12.6:55980.service. Oct 2 20:47:39.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.29:22-10.200.12.6:55980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:39.609935 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:47:39.610017 kernel: audit: type=1130 audit(1696279659.603:1298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.29:22-10.200.12.6:55980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:40.048000 audit[3328]: USER_ACCT pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:40.049809 sshd[3328]: Accepted publickey for core from 10.200.12.6 port 55980 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:47:40.052226 sshd[3328]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:47:40.057630 systemd[1]: Started session-27.scope. Oct 2 20:47:40.059000 systemd-logind[1364]: New session 27 of user core. Oct 2 20:47:40.050000 audit[3328]: CRED_ACQ pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:40.098306 kernel: audit: type=1101 audit(1696279660.048:1299): pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:40.098419 kernel: audit: type=1103 audit(1696279660.050:1300): pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:40.098454 kernel: audit: type=1006 audit(1696279660.050:1301): pid=3328 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 20:47:40.050000 audit[3328]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa728180 a2=3 a3=1 items=0 ppid=1 pid=3328 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:47:40.136733 kernel: audit: type=1300 audit(1696279660.050:1301): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa728180 a2=3 a3=1 items=0 ppid=1 pid=3328 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:47:40.050000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:47:40.146904 kernel: audit: type=1327 audit(1696279660.050:1301): proctitle=737368643A20636F7265205B707269765D Oct 2 20:47:40.146969 kernel: audit: type=1105 audit(1696279660.075:1302): pid=3328 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:40.075000 audit[3328]: USER_START pid=3328 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:40.078000 audit[3330]: CRED_ACQ pid=3330 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:40.196929 kernel: audit: type=1103 audit(1696279660.078:1303): pid=3330 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:40.228902 kubelet[2480]: E1002 20:47:40.228873 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:47:40.446112 sshd[3328]: pam_unix(sshd:session): session closed for user core Oct 2 20:47:40.445000 audit[3328]: USER_END pid=3328 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:40.450194 systemd-logind[1364]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:47:40.451557 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:47:40.453257 systemd-logind[1364]: Removed session 27. Oct 2 20:47:40.454303 systemd[1]: sshd@24-10.200.20.29:22-10.200.12.6:55980.service: Deactivated successfully. Oct 2 20:47:40.446000 audit[3328]: CRED_DISP pid=3328 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:40.495879 kernel: audit: type=1106 audit(1696279660.445:1304): pid=3328 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:40.495990 kernel: audit: type=1104 audit(1696279660.446:1305): pid=3328 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:40.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.29:22-10.200.12.6:55980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:44.401671 kubelet[2480]: E1002 20:47:44.401643 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:49.403086 kubelet[2480]: E1002 20:47:49.403036 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:50.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.29:22-10.200.12.6:36630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:50.515506 systemd[1]: Started sshd@25-10.200.20.29:22-10.200.12.6:36630.service. Oct 2 20:47:50.520800 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:47:50.520924 kernel: audit: type=1130 audit(1696279670.514:1307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.29:22-10.200.12.6:36630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:50.925000 audit[3341]: USER_ACCT pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:50.927382 sshd[3341]: Accepted publickey for core from 10.200.12.6 port 36630 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:47:50.951000 audit[3341]: CRED_ACQ pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:50.953615 sshd[3341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:47:50.960303 systemd[1]: Started session-28.scope. Oct 2 20:47:50.961749 systemd-logind[1364]: New session 28 of user core. Oct 2 20:47:50.974688 kernel: audit: type=1101 audit(1696279670.925:1308): pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:50.974815 kernel: audit: type=1103 audit(1696279670.951:1309): pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:50.989663 kernel: audit: type=1006 audit(1696279670.952:1310): pid=3341 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 20:47:50.989800 kernel: audit: type=1300 audit(1696279670.952:1310): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6aeb760 a2=3 a3=1 items=0 ppid=1 pid=3341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:47:50.952000 audit[3341]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6aeb760 a2=3 a3=1 items=0 ppid=1 pid=3341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:47:50.952000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:47:51.021601 kernel: audit: type=1327 audit(1696279670.952:1310): proctitle=737368643A20636F7265205B707269765D Oct 2 20:47:50.974000 audit[3341]: USER_START pid=3341 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:51.048090 kernel: audit: type=1105 audit(1696279670.974:1311): pid=3341 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:50.978000 audit[3343]: CRED_ACQ pid=3343 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:51.071682 kernel: audit: type=1103 audit(1696279670.978:1312): pid=3343 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:51.327379 sshd[3341]: pam_unix(sshd:session): session closed for user core Oct 2 20:47:51.327000 audit[3341]: USER_END pid=3341 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:51.330965 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:47:51.331888 systemd[1]: sshd@25-10.200.20.29:22-10.200.12.6:36630.service: Deactivated successfully. Oct 2 20:47:51.328000 audit[3341]: CRED_DISP pid=3341 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:51.376067 kernel: audit: type=1106 audit(1696279671.327:1313): pid=3341 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:51.376160 kernel: audit: type=1104 audit(1696279671.328:1314): pid=3341 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:47:51.330000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.29:22-10.200.12.6:36630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:47:51.376297 systemd-logind[1364]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:47:51.377136 systemd-logind[1364]: Removed session 28. Oct 2 20:47:54.404208 kubelet[2480]: E1002 20:47:54.404157 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:54.790000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:54.790000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023a05a0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:47:54.790000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:54.790000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:54.790000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001115e30 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:47:54.790000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:55.184000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:55.184000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:55.184000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d27a100 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:47:55.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:47:55.184000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a1a7110 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:47:55.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:47:55.207000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:55.207000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a170690 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:47:55.207000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:47:55.207000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:55.207000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400a1a71d0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:47:55.207000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:47:55.208000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:55.208000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a1a7350 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:47:55.208000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:47:55.208000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:55.208000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d27a200 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:47:55.208000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:47:55.229883 kubelet[2480]: E1002 20:47:55.229856 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:47:59.300926 kubelet[2480]: W1002 20:47:59.300897 2480 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:47:59.405114 kubelet[2480]: E1002 20:47:59.405090 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:01.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.29:22-10.200.12.6:46262 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:48:01.398337 systemd[1]: Started sshd@26-10.200.20.29:22-10.200.12.6:46262.service. Oct 2 20:48:01.403525 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:48:01.403631 kernel: audit: type=1130 audit(1696279681.397:1324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.29:22-10.200.12.6:46262 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:48:01.800000 audit[3354]: USER_ACCT pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:01.802179 sshd[3354]: Accepted publickey for core from 10.200.12.6 port 46262 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:48:01.828311 kernel: audit: type=1101 audit(1696279681.800:1325): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:01.852232 kernel: audit: type=1103 audit(1696279681.827:1326): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:01.827000 audit[3354]: CRED_ACQ pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:01.828627 sshd[3354]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:48:01.867784 kernel: audit: type=1006 audit(1696279681.827:1327): pid=3354 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 20:48:01.827000 audit[3354]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7880cf0 a2=3 a3=1 items=0 ppid=1 pid=3354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:01.894390 kernel: audit: type=1300 audit(1696279681.827:1327): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7880cf0 a2=3 a3=1 items=0 ppid=1 pid=3354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:01.871444 systemd[1]: Started session-29.scope. Oct 2 20:48:01.872571 systemd-logind[1364]: New session 29 of user core. Oct 2 20:48:01.827000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:48:01.902976 kernel: audit: type=1327 audit(1696279681.827:1327): proctitle=737368643A20636F7265205B707269765D Oct 2 20:48:01.902000 audit[3354]: USER_START pid=3354 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:01.930694 kernel: audit: type=1105 audit(1696279681.902:1328): pid=3354 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:01.902000 audit[3356]: CRED_ACQ pid=3356 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:01.952750 kernel: audit: type=1103 audit(1696279681.902:1329): pid=3356 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:02.218757 sshd[3354]: pam_unix(sshd:session): session closed for user core Oct 2 20:48:02.218000 audit[3354]: USER_END pid=3354 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:02.223154 systemd-logind[1364]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:48:02.224196 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:48:02.225235 systemd-logind[1364]: Removed session 29. Oct 2 20:48:02.225762 systemd[1]: sshd@26-10.200.20.29:22-10.200.12.6:46262.service: Deactivated successfully. Oct 2 20:48:02.218000 audit[3354]: CRED_DISP pid=3354 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:02.269233 kernel: audit: type=1106 audit(1696279682.218:1330): pid=3354 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:02.269354 kernel: audit: type=1104 audit(1696279682.218:1331): pid=3354 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:02.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.29:22-10.200.12.6:46262 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:48:04.406961 kubelet[2480]: E1002 20:48:04.406928 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:09.407853 kubelet[2480]: E1002 20:48:09.407797 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:10.229045 kubelet[2480]: E1002 20:48:10.229016 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-f7vv8_kube-system(5db1c46f-8948-4fc2-b38e-819dab56fed0)\"" pod="kube-system/cilium-f7vv8" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 Oct 2 20:48:11.765000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:11.771351 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:48:11.771431 kernel: audit: type=1400 audit(1696279691.765:1333): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:11.765000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:11.817056 kernel: audit: type=1400 audit(1696279691.765:1334): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:11.765000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002417740 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:48:11.846994 kernel: audit: type=1300 audit(1696279691.765:1334): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002417740 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:48:11.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:11.871077 kernel: audit: type=1327 audit(1696279691.765:1334): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:11.871149 kernel: audit: type=1400 audit(1696279691.765:1335): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:11.765000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:11.765000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002417760 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:48:11.921652 kernel: audit: type=1300 audit(1696279691.765:1335): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002417760 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:48:11.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:11.945568 kernel: audit: type=1327 audit(1696279691.765:1335): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:11.945718 kernel: audit: type=1300 audit(1696279691.765:1333): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023a0fe0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:48:11.765000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023a0fe0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:48:11.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:11.998790 kernel: audit: type=1327 audit(1696279691.765:1333): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:11.766000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:12.022335 kernel: audit: type=1400 audit(1696279691.766:1336): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:11.766000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023a1000 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:48:11.766000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:12.287285 systemd[1]: Started sshd@27-10.200.20.29:22-10.200.12.6:59350.service. Oct 2 20:48:12.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.29:22-10.200.12.6:59350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:48:12.692273 sshd[3365]: Accepted publickey for core from 10.200.12.6 port 59350 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:48:12.691000 audit[3365]: USER_ACCT pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:12.694268 sshd[3365]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:48:12.692000 audit[3365]: CRED_ACQ pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:12.692000 audit[3365]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6a2b990 a2=3 a3=1 items=0 ppid=1 pid=3365 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:12.692000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:48:12.698560 systemd[1]: Started session-30.scope. Oct 2 20:48:12.698974 systemd-logind[1364]: New session 30 of user core. Oct 2 20:48:12.701000 audit[3365]: USER_START pid=3365 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:12.704000 audit[3367]: CRED_ACQ pid=3367 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:13.059160 sshd[3365]: pam_unix(sshd:session): session closed for user core Oct 2 20:48:13.058000 audit[3365]: USER_END pid=3365 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:13.059000 audit[3365]: CRED_DISP pid=3365 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:13.061000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.29:22-10.200.12.6:59350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:48:13.062578 systemd[1]: sshd@27-10.200.20.29:22-10.200.12.6:59350.service: Deactivated successfully. Oct 2 20:48:13.063335 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:48:13.064123 systemd-logind[1364]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:48:13.064856 systemd-logind[1364]: Removed session 30. Oct 2 20:48:13.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.29:22-10.200.12.6:59366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:48:13.129377 systemd[1]: Started sshd@28-10.200.20.29:22-10.200.12.6:59366.service. Oct 2 20:48:13.530000 audit[3377]: USER_ACCT pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:13.532623 sshd[3377]: Accepted publickey for core from 10.200.12.6 port 59366 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:48:13.532000 audit[3377]: CRED_ACQ pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:13.532000 audit[3377]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffffc33f0 a2=3 a3=1 items=0 ppid=1 pid=3377 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:13.532000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:48:13.534500 sshd[3377]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:48:13.539061 systemd[1]: Started session-31.scope. Oct 2 20:48:13.539774 systemd-logind[1364]: New session 31 of user core. Oct 2 20:48:13.543000 audit[3377]: USER_START pid=3377 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:13.546000 audit[3379]: CRED_ACQ pid=3379 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:14.409501 kubelet[2480]: E1002 20:48:14.409474 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:15.840681 env[1384]: time="2023-10-02T20:48:15.840631758Z" level=info msg="StopPodSandbox for \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\"" Oct 2 20:48:15.841047 env[1384]: time="2023-10-02T20:48:15.840705158Z" level=info msg="Container to stop \"73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:48:15.843627 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446-shm.mount: Deactivated successfully. Oct 2 20:48:15.853798 systemd[1]: cri-containerd-6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446.scope: Deactivated successfully. Oct 2 20:48:15.852000 audit: BPF prog-id=117 op=UNLOAD Oct 2 20:48:15.856000 audit: BPF prog-id=120 op=UNLOAD Oct 2 20:48:15.875383 env[1384]: time="2023-10-02T20:48:15.875347225Z" level=info msg="StopContainer for \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\" with timeout 30 (s)" Oct 2 20:48:15.875959 env[1384]: time="2023-10-02T20:48:15.875901104Z" level=info msg="Stop container \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\" with signal terminated" Oct 2 20:48:15.889103 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446-rootfs.mount: Deactivated successfully. Oct 2 20:48:15.895000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:48:15.896804 systemd[1]: cri-containerd-564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08.scope: Deactivated successfully. Oct 2 20:48:15.899000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:48:15.924353 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08-rootfs.mount: Deactivated successfully. Oct 2 20:48:15.956400 env[1384]: time="2023-10-02T20:48:15.956347741Z" level=info msg="shim disconnected" id=564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08 Oct 2 20:48:15.956400 env[1384]: time="2023-10-02T20:48:15.956395861Z" level=warning msg="cleaning up after shim disconnected" id=564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08 namespace=k8s.io Oct 2 20:48:15.956400 env[1384]: time="2023-10-02T20:48:15.956405501Z" level=info msg="cleaning up dead shim" Oct 2 20:48:15.956683 env[1384]: time="2023-10-02T20:48:15.956580821Z" level=info msg="shim disconnected" id=6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446 Oct 2 20:48:15.956683 env[1384]: time="2023-10-02T20:48:15.956616261Z" level=warning msg="cleaning up after shim disconnected" id=6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446 namespace=k8s.io Oct 2 20:48:15.956683 env[1384]: time="2023-10-02T20:48:15.956623981Z" level=info msg="cleaning up dead shim" Oct 2 20:48:15.970013 env[1384]: time="2023-10-02T20:48:15.969959201Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:48:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3427 runtime=io.containerd.runc.v2\n" Oct 2 20:48:15.970323 env[1384]: time="2023-10-02T20:48:15.970284120Z" level=info msg="TearDown network for sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" successfully" Oct 2 20:48:15.970323 env[1384]: time="2023-10-02T20:48:15.970314120Z" level=info msg="StopPodSandbox for \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" returns successfully" Oct 2 20:48:15.980787 env[1384]: time="2023-10-02T20:48:15.980727744Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:48:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3426 runtime=io.containerd.runc.v2\n" Oct 2 20:48:15.989963 env[1384]: time="2023-10-02T20:48:15.989920210Z" level=info msg="StopContainer for \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\" returns successfully" Oct 2 20:48:15.990507 env[1384]: time="2023-10-02T20:48:15.990475769Z" level=info msg="StopPodSandbox for \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\"" Oct 2 20:48:15.990694 env[1384]: time="2023-10-02T20:48:15.990529169Z" level=info msg="Container to stop \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:48:15.991973 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3-shm.mount: Deactivated successfully. Oct 2 20:48:16.001999 systemd[1]: cri-containerd-2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3.scope: Deactivated successfully. Oct 2 20:48:16.001000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:48:16.005000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:48:16.035148 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3-rootfs.mount: Deactivated successfully. Oct 2 20:48:16.052618 env[1384]: time="2023-10-02T20:48:16.052561675Z" level=info msg="shim disconnected" id=2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3 Oct 2 20:48:16.052618 env[1384]: time="2023-10-02T20:48:16.052613755Z" level=warning msg="cleaning up after shim disconnected" id=2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3 namespace=k8s.io Oct 2 20:48:16.052618 env[1384]: time="2023-10-02T20:48:16.052624035Z" level=info msg="cleaning up dead shim" Oct 2 20:48:16.065780 env[1384]: time="2023-10-02T20:48:16.065727135Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:48:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3470 runtime=io.containerd.runc.v2\n" Oct 2 20:48:16.066057 env[1384]: time="2023-10-02T20:48:16.066028414Z" level=info msg="TearDown network for sandbox \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\" successfully" Oct 2 20:48:16.066111 env[1384]: time="2023-10-02T20:48:16.066055854Z" level=info msg="StopPodSandbox for \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\" returns successfully" Oct 2 20:48:16.126535 kubelet[2480]: I1002 20:48:16.126421 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:48:16.127306 kubelet[2480]: I1002 20:48:16.126485 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-host-proc-sys-kernel\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.127429 kubelet[2480]: I1002 20:48:16.127415 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-cilium-cgroup\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.127517 kubelet[2480]: I1002 20:48:16.127507 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-etc-cni-netd\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.127615 kubelet[2480]: I1002 20:48:16.127606 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/5db1c46f-8948-4fc2-b38e-819dab56fed0-clustermesh-secrets\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.127822 kubelet[2480]: I1002 20:48:16.127810 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-hostproc\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.127912 kubelet[2480]: I1002 20:48:16.127903 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-cilium-run\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.128128 kubelet[2480]: I1002 20:48:16.128116 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-host-proc-sys-net\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.129079 kubelet[2480]: I1002 20:48:16.129051 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-68l7k\" (UniqueName: \"kubernetes.io/projected/5db1c46f-8948-4fc2-b38e-819dab56fed0-kube-api-access-68l7k\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.129206 kubelet[2480]: I1002 20:48:16.129196 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5db1c46f-8948-4fc2-b38e-819dab56fed0-cilium-config-path\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.129317 kubelet[2480]: I1002 20:48:16.129306 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/5db1c46f-8948-4fc2-b38e-819dab56fed0-hubble-tls\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.129401 kubelet[2480]: I1002 20:48:16.129393 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-bpf-maps\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.129486 kubelet[2480]: I1002 20:48:16.129477 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-cni-path\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.129570 kubelet[2480]: I1002 20:48:16.129562 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-lib-modules\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.129656 kubelet[2480]: I1002 20:48:16.129646 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-xtables-lock\") pod \"5db1c46f-8948-4fc2-b38e-819dab56fed0\" (UID: \"5db1c46f-8948-4fc2-b38e-819dab56fed0\") " Oct 2 20:48:16.130729 kubelet[2480]: I1002 20:48:16.130698 2480 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.137188 kubelet[2480]: I1002 20:48:16.129194 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-hostproc" (OuterVolumeSpecName: "hostproc") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:48:16.137188 kubelet[2480]: I1002 20:48:16.131644 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:48:16.137188 kubelet[2480]: I1002 20:48:16.127743 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:48:16.137188 kubelet[2480]: I1002 20:48:16.127724 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:48:16.137188 kubelet[2480]: I1002 20:48:16.129214 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:48:16.137188 kubelet[2480]: I1002 20:48:16.129225 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:48:16.137188 kubelet[2480]: W1002 20:48:16.131784 2480 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/5db1c46f-8948-4fc2-b38e-819dab56fed0/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:48:16.137188 kubelet[2480]: I1002 20:48:16.133706 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/5db1c46f-8948-4fc2-b38e-819dab56fed0-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:48:16.137188 kubelet[2480]: I1002 20:48:16.131932 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:48:16.137188 kubelet[2480]: I1002 20:48:16.131945 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-cni-path" (OuterVolumeSpecName: "cni-path") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:48:16.137188 kubelet[2480]: I1002 20:48:16.132000 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:48:16.137661 kubelet[2480]: I1002 20:48:16.137624 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/5db1c46f-8948-4fc2-b38e-819dab56fed0-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:48:16.137992 kubelet[2480]: I1002 20:48:16.137962 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/5db1c46f-8948-4fc2-b38e-819dab56fed0-kube-api-access-68l7k" (OuterVolumeSpecName: "kube-api-access-68l7k") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "kube-api-access-68l7k". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:48:16.143843 kubelet[2480]: I1002 20:48:16.143770 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/5db1c46f-8948-4fc2-b38e-819dab56fed0-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "5db1c46f-8948-4fc2-b38e-819dab56fed0" (UID: "5db1c46f-8948-4fc2-b38e-819dab56fed0"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:48:16.232684 kubelet[2480]: I1002 20:48:16.232651 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-c6l2r\" (UniqueName: \"kubernetes.io/projected/459c2c8f-fc43-42f0-bff4-95ff5c1b0120-kube-api-access-c6l2r\") pod \"459c2c8f-fc43-42f0-bff4-95ff5c1b0120\" (UID: \"459c2c8f-fc43-42f0-bff4-95ff5c1b0120\") " Oct 2 20:48:16.233211 kubelet[2480]: I1002 20:48:16.233197 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/459c2c8f-fc43-42f0-bff4-95ff5c1b0120-cilium-config-path\") pod \"459c2c8f-fc43-42f0-bff4-95ff5c1b0120\" (UID: \"459c2c8f-fc43-42f0-bff4-95ff5c1b0120\") " Oct 2 20:48:16.233367 kubelet[2480]: I1002 20:48:16.233356 2480 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-host-proc-sys-net\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.233436 kubelet[2480]: I1002 20:48:16.233427 2480 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-68l7k\" (UniqueName: \"kubernetes.io/projected/5db1c46f-8948-4fc2-b38e-819dab56fed0-kube-api-access-68l7k\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.233493 kubelet[2480]: I1002 20:48:16.233485 2480 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5db1c46f-8948-4fc2-b38e-819dab56fed0-cilium-config-path\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.233552 kubelet[2480]: I1002 20:48:16.233543 2480 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/5db1c46f-8948-4fc2-b38e-819dab56fed0-hubble-tls\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.233620 kubelet[2480]: I1002 20:48:16.233610 2480 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-bpf-maps\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.233689 kubelet[2480]: W1002 20:48:16.233567 2480 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/459c2c8f-fc43-42f0-bff4-95ff5c1b0120/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:48:16.233738 kubelet[2480]: I1002 20:48:16.233676 2480 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-cni-path\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.233797 kubelet[2480]: I1002 20:48:16.233789 2480 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-lib-modules\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.233853 kubelet[2480]: I1002 20:48:16.233845 2480 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-xtables-lock\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.233911 kubelet[2480]: I1002 20:48:16.233903 2480 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-cilium-cgroup\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.233967 kubelet[2480]: I1002 20:48:16.233959 2480 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-etc-cni-netd\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.234025 kubelet[2480]: I1002 20:48:16.234017 2480 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-hostproc\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.234081 kubelet[2480]: I1002 20:48:16.234073 2480 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/5db1c46f-8948-4fc2-b38e-819dab56fed0-cilium-run\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.234135 kubelet[2480]: I1002 20:48:16.234127 2480 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/5db1c46f-8948-4fc2-b38e-819dab56fed0-clustermesh-secrets\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.235452 kubelet[2480]: I1002 20:48:16.235416 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/459c2c8f-fc43-42f0-bff4-95ff5c1b0120-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "459c2c8f-fc43-42f0-bff4-95ff5c1b0120" (UID: "459c2c8f-fc43-42f0-bff4-95ff5c1b0120"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:48:16.239141 kubelet[2480]: I1002 20:48:16.239109 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/459c2c8f-fc43-42f0-bff4-95ff5c1b0120-kube-api-access-c6l2r" (OuterVolumeSpecName: "kube-api-access-c6l2r") pod "459c2c8f-fc43-42f0-bff4-95ff5c1b0120" (UID: "459c2c8f-fc43-42f0-bff4-95ff5c1b0120"). InnerVolumeSpecName "kube-api-access-c6l2r". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:48:16.334324 kubelet[2480]: I1002 20:48:16.334294 2480 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-c6l2r\" (UniqueName: \"kubernetes.io/projected/459c2c8f-fc43-42f0-bff4-95ff5c1b0120-kube-api-access-c6l2r\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.334501 kubelet[2480]: I1002 20:48:16.334490 2480 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/459c2c8f-fc43-42f0-bff4-95ff5c1b0120-cilium-config-path\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:48:16.843474 systemd[1]: var-lib-kubelet-pods-459c2c8f\x2dfc43\x2d42f0\x2dbff4\x2d95ff5c1b0120-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dc6l2r.mount: Deactivated successfully. Oct 2 20:48:16.843568 systemd[1]: var-lib-kubelet-pods-5db1c46f\x2d8948\x2d4fc2\x2db38e\x2d819dab56fed0-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d68l7k.mount: Deactivated successfully. Oct 2 20:48:16.843633 systemd[1]: var-lib-kubelet-pods-5db1c46f\x2d8948\x2d4fc2\x2db38e\x2d819dab56fed0-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:48:16.843685 systemd[1]: var-lib-kubelet-pods-5db1c46f\x2d8948\x2d4fc2\x2db38e\x2d819dab56fed0-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:48:16.855122 kubelet[2480]: I1002 20:48:16.855099 2480 scope.go:115] "RemoveContainer" containerID="564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08" Oct 2 20:48:16.855864 systemd[1]: Removed slice kubepods-besteffort-pod459c2c8f_fc43_42f0_bff4_95ff5c1b0120.slice. Oct 2 20:48:16.859071 env[1384]: time="2023-10-02T20:48:16.858872525Z" level=info msg="RemoveContainer for \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\"" Oct 2 20:48:16.863651 systemd[1]: Removed slice kubepods-burstable-pod5db1c46f_8948_4fc2_b38e_819dab56fed0.slice. Oct 2 20:48:16.870022 env[1384]: time="2023-10-02T20:48:16.869976348Z" level=info msg="RemoveContainer for \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\" returns successfully" Oct 2 20:48:16.870323 kubelet[2480]: I1002 20:48:16.870262 2480 scope.go:115] "RemoveContainer" containerID="564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08" Oct 2 20:48:16.870867 env[1384]: time="2023-10-02T20:48:16.870780866Z" level=error msg="ContainerStatus for \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\": not found" Oct 2 20:48:16.871091 kubelet[2480]: E1002 20:48:16.871079 2480 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\": not found" containerID="564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08" Oct 2 20:48:16.871248 kubelet[2480]: I1002 20:48:16.871234 2480 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08} err="failed to get container status \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\": rpc error: code = NotFound desc = an error occurred when try to find container \"564470aa930060c2b0816bc2ed0c24857e440cad635502775cf025a01fcf4d08\": not found" Oct 2 20:48:16.871326 kubelet[2480]: I1002 20:48:16.871316 2480 scope.go:115] "RemoveContainer" containerID="73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097" Oct 2 20:48:16.873463 env[1384]: time="2023-10-02T20:48:16.873434582Z" level=info msg="RemoveContainer for \"73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097\"" Oct 2 20:48:16.885518 env[1384]: time="2023-10-02T20:48:16.885462204Z" level=info msg="RemoveContainer for \"73500105f478d0a6e1a35219fdc88069c1ffd8168eaf038bf58efe93dda71097\" returns successfully" Oct 2 20:48:17.230668 kubelet[2480]: I1002 20:48:17.230588 2480 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=459c2c8f-fc43-42f0-bff4-95ff5c1b0120 path="/var/lib/kubelet/pods/459c2c8f-fc43-42f0-bff4-95ff5c1b0120/volumes" Oct 2 20:48:17.231739 kubelet[2480]: I1002 20:48:17.231726 2480 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=5db1c46f-8948-4fc2-b38e-819dab56fed0 path="/var/lib/kubelet/pods/5db1c46f-8948-4fc2-b38e-819dab56fed0/volumes" Oct 2 20:48:17.872932 sshd[3377]: pam_unix(sshd:session): session closed for user core Oct 2 20:48:17.873000 audit[3377]: USER_END pid=3377 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:17.876395 systemd[1]: sshd@28-10.200.20.29:22-10.200.12.6:59366.service: Deactivated successfully. Oct 2 20:48:17.877093 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 20:48:17.877266 systemd[1]: session-31.scope: Consumed 1.446s CPU time. Oct 2 20:48:17.879373 kernel: kauditd_printk_skb: 27 callbacks suppressed Oct 2 20:48:17.879446 kernel: audit: type=1106 audit(1696279697.873:1358): pid=3377 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:17.879947 systemd-logind[1364]: Session 31 logged out. Waiting for processes to exit. Oct 2 20:48:17.880677 systemd-logind[1364]: Removed session 31. Oct 2 20:48:17.873000 audit[3377]: CRED_DISP pid=3377 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:17.925806 kernel: audit: type=1104 audit(1696279697.873:1359): pid=3377 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:17.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.29:22-10.200.12.6:59366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:48:17.953321 kernel: audit: type=1131 audit(1696279697.873:1360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.29:22-10.200.12.6:59366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:48:17.953422 kernel: audit: type=1130 audit(1696279697.945:1361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.29:22-10.200.12.6:55460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:48:17.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.29:22-10.200.12.6:55460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:48:17.946709 systemd[1]: Started sshd@29-10.200.20.29:22-10.200.12.6:55460.service. Oct 2 20:48:18.383000 audit[3488]: USER_ACCT pid=3488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:18.384836 sshd[3488]: Accepted publickey for core from 10.200.12.6 port 55460 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:48:18.387100 sshd[3488]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:48:18.385000 audit[3488]: CRED_ACQ pid=3488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:18.414368 systemd[1]: Started session-32.scope. Oct 2 20:48:18.415225 systemd-logind[1364]: New session 32 of user core. Oct 2 20:48:18.432431 kernel: audit: type=1101 audit(1696279698.383:1362): pid=3488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:18.432604 kernel: audit: type=1103 audit(1696279698.385:1363): pid=3488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:18.446986 kernel: audit: type=1006 audit(1696279698.385:1364): pid=3488 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 20:48:18.447137 kernel: audit: type=1300 audit(1696279698.385:1364): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce268000 a2=3 a3=1 items=0 ppid=1 pid=3488 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:18.385000 audit[3488]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce268000 a2=3 a3=1 items=0 ppid=1 pid=3488 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:18.385000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:48:18.478478 kernel: audit: type=1327 audit(1696279698.385:1364): proctitle=737368643A20636F7265205B707269765D Oct 2 20:48:18.478561 kernel: audit: type=1105 audit(1696279698.432:1365): pid=3488 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:18.432000 audit[3488]: USER_START pid=3488 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:18.436000 audit[3490]: CRED_ACQ pid=3490 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:48:19.410746 kubelet[2480]: E1002 20:48:19.410724 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:19.517435 kubelet[2480]: I1002 20:48:19.517391 2480 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:48:19.517642 kubelet[2480]: E1002 20:48:19.517629 2480 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="459c2c8f-fc43-42f0-bff4-95ff5c1b0120" containerName="cilium-operator" Oct 2 20:48:19.517731 kubelet[2480]: E1002 20:48:19.517722 2480 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5db1c46f-8948-4fc2-b38e-819dab56fed0" containerName="mount-cgroup" Oct 2 20:48:19.517800 kubelet[2480]: E1002 20:48:19.517779 2480 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5db1c46f-8948-4fc2-b38e-819dab56fed0" containerName="mount-cgroup" Oct 2 20:48:19.517852 kubelet[2480]: E1002 20:48:19.517844 2480 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5db1c46f-8948-4fc2-b38e-819dab56fed0" containerName="mount-cgroup" Oct 2 20:48:19.517919 kubelet[2480]: E1002 20:48:19.517910 2480 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5db1c46f-8948-4fc2-b38e-819dab56fed0" containerName="mount-cgroup" Oct 2 20:48:19.517999 kubelet[2480]: I1002 20:48:19.517990 2480 memory_manager.go:346] "RemoveStaleState removing state" podUID="5db1c46f-8948-4fc2-b38e-819dab56fed0" containerName="mount-cgroup" Oct 2 20:48:19.518063 kubelet[2480]: I1002 20:48:19.518047 2480 memory_manager.go:346] "RemoveStaleState removing state" podUID="459c2c8f-fc43-42f0-bff4-95ff5c1b0120" containerName="cilium-operator" Oct 2 20:48:19.518118 kubelet[2480]: I1002 20:48:19.518111 2480 memory_manager.go:346] "RemoveStaleState removing state" podUID="5db1c46f-8948-4fc2-b38e-819dab56fed0" containerName="mount-cgroup" Oct 2 20:48:19.518192 kubelet[2480]: I1002 20:48:19.518184 2480 memory_manager.go:346] "RemoveStaleState removing state" podUID="5db1c46f-8948-4fc2-b38e-819dab56fed0" containerName="mount-cgroup" Oct 2 20:48:19.518263 kubelet[2480]: I1002 20:48:19.518243 2480 memory_manager.go:346] "RemoveStaleState removing state" podUID="5db1c46f-8948-4fc2-b38e-819dab56fed0" containerName="mount-cgroup" Oct 2 20:48:19.518320 kubelet[2480]: I1002 20:48:19.518311 2480 memory_manager.go:346] "RemoveStaleState removing state" podUID="5db1c46f-8948-4fc2-b38e-819dab56fed0" containerName="mount-cgroup" Oct 2 20:48:19.518411 kubelet[2480]: E1002 20:48:19.518401 2480 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5db1c46f-8948-4fc2-b38e-819dab56fed0" containerName="mount-cgroup" Oct 2 20:48:19.518543 kubelet[2480]: E1002 20:48:19.518533 2480 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5db1c46f-8948-4fc2-b38e-819dab56fed0" containerName="mount-cgroup" Oct 2 20:48:19.518628 kubelet[2480]: I1002 20:48:19.518619 2480 memory_manager.go:346] "RemoveStaleState removing state" podUID="5db1c46f-8948-4fc2-b38e-819dab56fed0" containerName="mount-cgroup" Oct 2 20:48:19.523339 systemd[1]: Created slice kubepods-burstable-podaf891ea2_aecd_49ab_854f_ff3a42dc887f.slice. Oct 2 20:48:19.676664 kubelet[2480]: I1002 20:48:19.676556 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-config-path\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676664 kubelet[2480]: I1002 20:48:19.676603 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-host-proc-sys-kernel\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676664 kubelet[2480]: I1002 20:48:19.676625 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-run\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676664 kubelet[2480]: I1002 20:48:19.676645 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/af891ea2-aecd-49ab-854f-ff3a42dc887f-clustermesh-secrets\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676664 kubelet[2480]: I1002 20:48:19.676665 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-lib-modules\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676886 kubelet[2480]: I1002 20:48:19.676684 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-ipsec-secrets\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676886 kubelet[2480]: I1002 20:48:19.676703 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-bpf-maps\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676886 kubelet[2480]: I1002 20:48:19.676722 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-etc-cni-netd\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676886 kubelet[2480]: I1002 20:48:19.676741 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-host-proc-sys-net\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676886 kubelet[2480]: I1002 20:48:19.676758 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-hostproc\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676886 kubelet[2480]: I1002 20:48:19.676784 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7964b\" (UniqueName: \"kubernetes.io/projected/af891ea2-aecd-49ab-854f-ff3a42dc887f-kube-api-access-7964b\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676886 kubelet[2480]: I1002 20:48:19.676805 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-cgroup\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676886 kubelet[2480]: I1002 20:48:19.676822 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-cni-path\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676886 kubelet[2480]: I1002 20:48:19.676843 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-xtables-lock\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.676886 kubelet[2480]: I1002 20:48:19.676864 2480 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/af891ea2-aecd-49ab-854f-ff3a42dc887f-hubble-tls\") pod \"cilium-cdzk5\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " pod="kube-system/cilium-cdzk5" Oct 2 20:48:19.828593 env[1384]: time="2023-10-02T20:48:19.828242129Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-cdzk5,Uid:af891ea2-aecd-49ab-854f-ff3a42dc887f,Namespace:kube-system,Attempt:0,}" Oct 2 20:48:19.873467 env[1384]: time="2023-10-02T20:48:19.873363861Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:48:19.873467 env[1384]: time="2023-10-02T20:48:19.873421460Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:48:19.873467 env[1384]: time="2023-10-02T20:48:19.873431260Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:48:19.873976 env[1384]: time="2023-10-02T20:48:19.873902420Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8 pid=3508 runtime=io.containerd.runc.v2 Oct 2 20:48:19.890041 systemd[1]: Started cri-containerd-b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8.scope. Oct 2 20:48:19.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit: BPF prog-id=132 op=LOAD Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3508 pid=3518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:19.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231353833393362313662393763316130613536306536333862393465 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3508 pid=3518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:19.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231353833393362313662393763316130613536306536333862393465 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit: BPF prog-id=133 op=LOAD Oct 2 20:48:19.906000 audit[3518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3508 pid=3518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:19.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231353833393362313662393763316130613536306536333862393465 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit: BPF prog-id=134 op=LOAD Oct 2 20:48:19.906000 audit[3518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3508 pid=3518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:19.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231353833393362313662393763316130613536306536333862393465 Oct 2 20:48:19.906000 audit: BPF prog-id=134 op=UNLOAD Oct 2 20:48:19.906000 audit: BPF prog-id=133 op=UNLOAD Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { perfmon } for pid=3518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit[3518]: AVC avc: denied { bpf } for pid=3518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:19.906000 audit: BPF prog-id=135 op=LOAD Oct 2 20:48:19.906000 audit[3518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3508 pid=3518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:19.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231353833393362313662393763316130613536306536333862393465 Oct 2 20:48:19.930481 env[1384]: time="2023-10-02T20:48:19.930335494Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-cdzk5,Uid:af891ea2-aecd-49ab-854f-ff3a42dc887f,Namespace:kube-system,Attempt:0,} returns sandbox id \"b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8\"" Oct 2 20:48:19.937692 env[1384]: time="2023-10-02T20:48:19.937649723Z" level=info msg="CreateContainer within sandbox \"b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:48:19.984689 env[1384]: time="2023-10-02T20:48:19.984637292Z" level=info msg="CreateContainer within sandbox \"b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475\"" Oct 2 20:48:19.986381 env[1384]: time="2023-10-02T20:48:19.985447090Z" level=info msg="StartContainer for \"5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475\"" Oct 2 20:48:20.008579 systemd[1]: Started cri-containerd-5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475.scope. Oct 2 20:48:20.028857 systemd[1]: cri-containerd-5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475.scope: Deactivated successfully. Oct 2 20:48:20.109808 env[1384]: time="2023-10-02T20:48:20.109757102Z" level=info msg="shim disconnected" id=5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475 Oct 2 20:48:20.110052 env[1384]: time="2023-10-02T20:48:20.110034502Z" level=warning msg="cleaning up after shim disconnected" id=5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475 namespace=k8s.io Oct 2 20:48:20.110110 env[1384]: time="2023-10-02T20:48:20.110098182Z" level=info msg="cleaning up dead shim" Oct 2 20:48:20.123470 env[1384]: time="2023-10-02T20:48:20.123419801Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:48:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3568 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:48:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:48:20.123888 env[1384]: time="2023-10-02T20:48:20.123833201Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:48:20.124316 env[1384]: time="2023-10-02T20:48:20.124284040Z" level=error msg="Failed to pipe stderr of container \"5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475\"" error="reading from a closed fifo" Oct 2 20:48:20.127276 env[1384]: time="2023-10-02T20:48:20.127234156Z" level=error msg="Failed to pipe stdout of container \"5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475\"" error="reading from a closed fifo" Oct 2 20:48:20.132149 env[1384]: time="2023-10-02T20:48:20.132109308Z" level=error msg="StartContainer for \"5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:48:20.132602 kubelet[2480]: E1002 20:48:20.132447 2480 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475" Oct 2 20:48:20.132602 kubelet[2480]: E1002 20:48:20.132548 2480 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:48:20.132602 kubelet[2480]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:48:20.132602 kubelet[2480]: rm /hostbin/cilium-mount Oct 2 20:48:20.132602 kubelet[2480]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7964b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-cdzk5_kube-system(af891ea2-aecd-49ab-854f-ff3a42dc887f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:48:20.132602 kubelet[2480]: E1002 20:48:20.132582 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-cdzk5" podUID=af891ea2-aecd-49ab-854f-ff3a42dc887f Oct 2 20:48:20.872948 env[1384]: time="2023-10-02T20:48:20.872889186Z" level=info msg="CreateContainer within sandbox \"b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:48:20.907463 env[1384]: time="2023-10-02T20:48:20.907400973Z" level=info msg="CreateContainer within sandbox \"b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c\"" Oct 2 20:48:20.908613 env[1384]: time="2023-10-02T20:48:20.908577812Z" level=info msg="StartContainer for \"eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c\"" Oct 2 20:48:20.933929 systemd[1]: Started cri-containerd-eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c.scope. Oct 2 20:48:20.947841 systemd[1]: cri-containerd-eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c.scope: Deactivated successfully. Oct 2 20:48:20.966402 env[1384]: time="2023-10-02T20:48:20.966332244Z" level=info msg="shim disconnected" id=eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c Oct 2 20:48:20.966402 env[1384]: time="2023-10-02T20:48:20.966388844Z" level=warning msg="cleaning up after shim disconnected" id=eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c namespace=k8s.io Oct 2 20:48:20.966402 env[1384]: time="2023-10-02T20:48:20.966398084Z" level=info msg="cleaning up dead shim" Oct 2 20:48:20.979335 env[1384]: time="2023-10-02T20:48:20.979280024Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:48:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3604 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:48:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:48:20.979594 env[1384]: time="2023-10-02T20:48:20.979537184Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:48:20.979807 env[1384]: time="2023-10-02T20:48:20.979767624Z" level=error msg="Failed to pipe stderr of container \"eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c\"" error="reading from a closed fifo" Oct 2 20:48:20.979912 env[1384]: time="2023-10-02T20:48:20.979890623Z" level=error msg="Failed to pipe stdout of container \"eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c\"" error="reading from a closed fifo" Oct 2 20:48:20.984696 env[1384]: time="2023-10-02T20:48:20.984646256Z" level=error msg="StartContainer for \"eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:48:20.985114 kubelet[2480]: E1002 20:48:20.984926 2480 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c" Oct 2 20:48:20.985114 kubelet[2480]: E1002 20:48:20.985044 2480 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:48:20.985114 kubelet[2480]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:48:20.985114 kubelet[2480]: rm /hostbin/cilium-mount Oct 2 20:48:20.985114 kubelet[2480]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7964b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-cdzk5_kube-system(af891ea2-aecd-49ab-854f-ff3a42dc887f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:48:20.985114 kubelet[2480]: E1002 20:48:20.985092 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-cdzk5" podUID=af891ea2-aecd-49ab-854f-ff3a42dc887f Oct 2 20:48:21.783507 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c-rootfs.mount: Deactivated successfully. Oct 2 20:48:21.871651 kubelet[2480]: I1002 20:48:21.871621 2480 scope.go:115] "RemoveContainer" containerID="5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475" Oct 2 20:48:21.872010 kubelet[2480]: I1002 20:48:21.871991 2480 scope.go:115] "RemoveContainer" containerID="5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475" Oct 2 20:48:21.873615 env[1384]: time="2023-10-02T20:48:21.873522111Z" level=info msg="RemoveContainer for \"5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475\"" Oct 2 20:48:21.874204 env[1384]: time="2023-10-02T20:48:21.873785111Z" level=info msg="RemoveContainer for \"5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475\"" Oct 2 20:48:21.874406 env[1384]: time="2023-10-02T20:48:21.874375350Z" level=error msg="RemoveContainer for \"5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475\" failed" error="failed to set removing state for container \"5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475\": container is already in removing state" Oct 2 20:48:21.874675 kubelet[2480]: E1002 20:48:21.874654 2480 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475\": container is already in removing state" containerID="5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475" Oct 2 20:48:21.874810 kubelet[2480]: E1002 20:48:21.874688 2480 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475": container is already in removing state; Skipping pod "cilium-cdzk5_kube-system(af891ea2-aecd-49ab-854f-ff3a42dc887f)" Oct 2 20:48:21.875186 kubelet[2480]: E1002 20:48:21.875082 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-cdzk5_kube-system(af891ea2-aecd-49ab-854f-ff3a42dc887f)\"" pod="kube-system/cilium-cdzk5" podUID=af891ea2-aecd-49ab-854f-ff3a42dc887f Oct 2 20:48:21.889459 env[1384]: time="2023-10-02T20:48:21.889421767Z" level=info msg="RemoveContainer for \"5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475\" returns successfully" Oct 2 20:48:23.214272 kubelet[2480]: W1002 20:48:23.214204 2480 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podaf891ea2_aecd_49ab_854f_ff3a42dc887f.slice/cri-containerd-5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475.scope WatchSource:0}: container "5f8c9b3e08d8998453af3ff47b04e560f4db60a56d7d3f7a9a8e097a64033475" in namespace "k8s.io": not found Oct 2 20:48:24.411949 kubelet[2480]: E1002 20:48:24.411916 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:26.321435 kubelet[2480]: W1002 20:48:26.321391 2480 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podaf891ea2_aecd_49ab_854f_ff3a42dc887f.slice/cri-containerd-eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c.scope WatchSource:0}: task eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c not found: not found Oct 2 20:48:29.412685 kubelet[2480]: E1002 20:48:29.412653 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:34.413852 kubelet[2480]: E1002 20:48:34.413818 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:36.230486 env[1384]: time="2023-10-02T20:48:36.230312389Z" level=info msg="CreateContainer within sandbox \"b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:48:36.276713 env[1384]: time="2023-10-02T20:48:36.276670440Z" level=info msg="CreateContainer within sandbox \"b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd\"" Oct 2 20:48:36.277612 env[1384]: time="2023-10-02T20:48:36.277576759Z" level=info msg="StartContainer for \"844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd\"" Oct 2 20:48:36.299299 systemd[1]: Started cri-containerd-844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd.scope. Oct 2 20:48:36.305328 systemd[1]: run-containerd-runc-k8s.io-844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd-runc.x8uwkp.mount: Deactivated successfully. Oct 2 20:48:36.318485 systemd[1]: cri-containerd-844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd.scope: Deactivated successfully. Oct 2 20:48:36.348655 env[1384]: time="2023-10-02T20:48:36.348598774Z" level=info msg="shim disconnected" id=844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd Oct 2 20:48:36.348655 env[1384]: time="2023-10-02T20:48:36.348652734Z" level=warning msg="cleaning up after shim disconnected" id=844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd namespace=k8s.io Oct 2 20:48:36.348881 env[1384]: time="2023-10-02T20:48:36.348662534Z" level=info msg="cleaning up dead shim" Oct 2 20:48:36.364561 env[1384]: time="2023-10-02T20:48:36.364497470Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:48:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3641 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:48:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:48:36.365007 env[1384]: time="2023-10-02T20:48:36.364950430Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:48:36.366279 env[1384]: time="2023-10-02T20:48:36.366239628Z" level=error msg="Failed to pipe stdout of container \"844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd\"" error="reading from a closed fifo" Oct 2 20:48:36.366417 env[1384]: time="2023-10-02T20:48:36.366394828Z" level=error msg="Failed to pipe stderr of container \"844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd\"" error="reading from a closed fifo" Oct 2 20:48:36.371014 env[1384]: time="2023-10-02T20:48:36.370965221Z" level=error msg="StartContainer for \"844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:48:36.371258 kubelet[2480]: E1002 20:48:36.371231 2480 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd" Oct 2 20:48:36.371539 kubelet[2480]: E1002 20:48:36.371321 2480 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:48:36.371539 kubelet[2480]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:48:36.371539 kubelet[2480]: rm /hostbin/cilium-mount Oct 2 20:48:36.371539 kubelet[2480]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7964b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-cdzk5_kube-system(af891ea2-aecd-49ab-854f-ff3a42dc887f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:48:36.371539 kubelet[2480]: E1002 20:48:36.371351 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-cdzk5" podUID=af891ea2-aecd-49ab-854f-ff3a42dc887f Oct 2 20:48:36.898994 kubelet[2480]: I1002 20:48:36.898479 2480 scope.go:115] "RemoveContainer" containerID="eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c" Oct 2 20:48:36.898994 kubelet[2480]: I1002 20:48:36.898785 2480 scope.go:115] "RemoveContainer" containerID="eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c" Oct 2 20:48:36.900006 env[1384]: time="2023-10-02T20:48:36.899961197Z" level=info msg="RemoveContainer for \"eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c\"" Oct 2 20:48:36.900347 env[1384]: time="2023-10-02T20:48:36.900319237Z" level=info msg="RemoveContainer for \"eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c\"" Oct 2 20:48:36.900421 env[1384]: time="2023-10-02T20:48:36.900383517Z" level=error msg="RemoveContainer for \"eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c\" failed" error="failed to set removing state for container \"eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c\": container is already in removing state" Oct 2 20:48:36.900557 kubelet[2480]: E1002 20:48:36.900536 2480 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c\": container is already in removing state" containerID="eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c" Oct 2 20:48:36.900647 kubelet[2480]: E1002 20:48:36.900638 2480 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c": container is already in removing state; Skipping pod "cilium-cdzk5_kube-system(af891ea2-aecd-49ab-854f-ff3a42dc887f)" Oct 2 20:48:36.901029 kubelet[2480]: E1002 20:48:36.901015 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-cdzk5_kube-system(af891ea2-aecd-49ab-854f-ff3a42dc887f)\"" pod="kube-system/cilium-cdzk5" podUID=af891ea2-aecd-49ab-854f-ff3a42dc887f Oct 2 20:48:36.910699 env[1384]: time="2023-10-02T20:48:36.910660061Z" level=info msg="RemoveContainer for \"eeae645e5579ec2951c998598c3bd5e44a53c1e8eb260d1b23e1a2884fd93d5c\" returns successfully" Oct 2 20:48:37.253321 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd-rootfs.mount: Deactivated successfully. Oct 2 20:48:39.414835 kubelet[2480]: E1002 20:48:39.414800 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:39.454590 kubelet[2480]: W1002 20:48:39.454523 2480 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podaf891ea2_aecd_49ab_854f_ff3a42dc887f.slice/cri-containerd-844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd.scope WatchSource:0}: task 844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd not found: not found Oct 2 20:48:44.416231 kubelet[2480]: E1002 20:48:44.416199 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:49.229111 kubelet[2480]: E1002 20:48:49.229061 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-cdzk5_kube-system(af891ea2-aecd-49ab-854f-ff3a42dc887f)\"" pod="kube-system/cilium-cdzk5" podUID=af891ea2-aecd-49ab-854f-ff3a42dc887f Oct 2 20:48:49.417092 kubelet[2480]: E1002 20:48:49.417070 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:54.418651 kubelet[2480]: E1002 20:48:54.418568 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:54.791000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:54.797015 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 20:48:54.821724 kernel: audit: type=1400 audit(1696279734.791:1385): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:54.821804 kernel: audit: type=1300 audit(1696279734.791:1385): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001c68600 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:48:54.791000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001c68600 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:48:54.791000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:54.875747 kernel: audit: type=1327 audit(1696279734.791:1385): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:54.875894 kernel: audit: type=1400 audit(1696279734.792:1386): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:54.792000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:54.792000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010d5660 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:48:54.927960 kernel: audit: type=1300 audit(1696279734.792:1386): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010d5660 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:48:54.792000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:54.953377 kernel: audit: type=1327 audit(1696279734.792:1386): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:55.185000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:55.185000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40088bf080 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:48:55.237589 kernel: audit: type=1400 audit(1696279735.185:1388): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:55.237701 kernel: audit: type=1300 audit(1696279735.185:1388): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40088bf080 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:48:55.185000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:48:55.263914 kernel: audit: type=1327 audit(1696279735.185:1388): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:48:55.185000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:55.287985 kernel: audit: type=1400 audit(1696279735.185:1387): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:55.185000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40083fce10 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:48:55.185000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:48:55.209000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:55.209000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40083fce70 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:48:55.209000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:48:55.209000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:55.209000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40083fcea0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:48:55.209000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:48:55.210000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:55.210000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4008b68180 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:48:55.210000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:48:55.210000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:55.210000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400875f950 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:48:55.210000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:48:59.246237 env[1384]: time="2023-10-02T20:48:59.246184700Z" level=info msg="StopPodSandbox for \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\"" Oct 2 20:48:59.246545 env[1384]: time="2023-10-02T20:48:59.246283020Z" level=info msg="TearDown network for sandbox \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\" successfully" Oct 2 20:48:59.246545 env[1384]: time="2023-10-02T20:48:59.246315660Z" level=info msg="StopPodSandbox for \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\" returns successfully" Oct 2 20:48:59.246807 env[1384]: time="2023-10-02T20:48:59.246773938Z" level=info msg="RemovePodSandbox for \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\"" Oct 2 20:48:59.246852 env[1384]: time="2023-10-02T20:48:59.246804697Z" level=info msg="Forcibly stopping sandbox \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\"" Oct 2 20:48:59.246896 env[1384]: time="2023-10-02T20:48:59.246874897Z" level=info msg="TearDown network for sandbox \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\" successfully" Oct 2 20:48:59.261538 env[1384]: time="2023-10-02T20:48:59.261497913Z" level=info msg="RemovePodSandbox \"2b31c264b26dd46e81c1bd2cf7e3ac8f0d957f96e0dfe29e3a450fdd506613e3\" returns successfully" Oct 2 20:48:59.262121 env[1384]: time="2023-10-02T20:48:59.261975831Z" level=info msg="StopPodSandbox for \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\"" Oct 2 20:48:59.262121 env[1384]: time="2023-10-02T20:48:59.262044111Z" level=info msg="TearDown network for sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" successfully" Oct 2 20:48:59.262121 env[1384]: time="2023-10-02T20:48:59.262074231Z" level=info msg="StopPodSandbox for \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" returns successfully" Oct 2 20:48:59.262472 env[1384]: time="2023-10-02T20:48:59.262437749Z" level=info msg="RemovePodSandbox for \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\"" Oct 2 20:48:59.262516 env[1384]: time="2023-10-02T20:48:59.262471629Z" level=info msg="Forcibly stopping sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\"" Oct 2 20:48:59.262544 env[1384]: time="2023-10-02T20:48:59.262527909Z" level=info msg="TearDown network for sandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" successfully" Oct 2 20:48:59.272776 env[1384]: time="2023-10-02T20:48:59.272729304Z" level=info msg="RemovePodSandbox \"6434943850bd0bc8b0dc799b4af22434b9a079539b87822e80355c82a46a5446\" returns successfully" Oct 2 20:48:59.419756 kubelet[2480]: E1002 20:48:59.419732 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:49:02.231736 env[1384]: time="2023-10-02T20:49:02.231551175Z" level=info msg="CreateContainer within sandbox \"b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:49:02.264386 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4198321046.mount: Deactivated successfully. Oct 2 20:49:02.282306 env[1384]: time="2023-10-02T20:49:02.282257317Z" level=info msg="CreateContainer within sandbox \"b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e\"" Oct 2 20:49:02.282814 env[1384]: time="2023-10-02T20:49:02.282781475Z" level=info msg="StartContainer for \"f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e\"" Oct 2 20:49:02.310703 systemd[1]: Started cri-containerd-f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e.scope. Oct 2 20:49:02.324265 systemd[1]: cri-containerd-f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e.scope: Deactivated successfully. Oct 2 20:49:02.403662 env[1384]: time="2023-10-02T20:49:02.403609596Z" level=info msg="shim disconnected" id=f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e Oct 2 20:49:02.404015 env[1384]: time="2023-10-02T20:49:02.403994595Z" level=warning msg="cleaning up after shim disconnected" id=f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e namespace=k8s.io Oct 2 20:49:02.404092 env[1384]: time="2023-10-02T20:49:02.404078634Z" level=info msg="cleaning up dead shim" Oct 2 20:49:02.417423 env[1384]: time="2023-10-02T20:49:02.417378097Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:49:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3684 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:49:02Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:49:02.417856 env[1384]: time="2023-10-02T20:49:02.417800976Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:49:02.419241 env[1384]: time="2023-10-02T20:49:02.418126214Z" level=error msg="Failed to pipe stdout of container \"f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e\"" error="reading from a closed fifo" Oct 2 20:49:02.419587 env[1384]: time="2023-10-02T20:49:02.419348769Z" level=error msg="Failed to pipe stderr of container \"f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e\"" error="reading from a closed fifo" Oct 2 20:49:02.424625 env[1384]: time="2023-10-02T20:49:02.424586946Z" level=error msg="StartContainer for \"f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:49:02.424951 kubelet[2480]: E1002 20:49:02.424916 2480 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e" Oct 2 20:49:02.425257 kubelet[2480]: E1002 20:49:02.425038 2480 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:49:02.425257 kubelet[2480]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:49:02.425257 kubelet[2480]: rm /hostbin/cilium-mount Oct 2 20:49:02.425257 kubelet[2480]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7964b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-cdzk5_kube-system(af891ea2-aecd-49ab-854f-ff3a42dc887f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:49:02.425257 kubelet[2480]: E1002 20:49:02.425073 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-cdzk5" podUID=af891ea2-aecd-49ab-854f-ff3a42dc887f Oct 2 20:49:02.947214 kubelet[2480]: I1002 20:49:02.946814 2480 scope.go:115] "RemoveContainer" containerID="844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd" Oct 2 20:49:02.947214 kubelet[2480]: I1002 20:49:02.947148 2480 scope.go:115] "RemoveContainer" containerID="844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd" Oct 2 20:49:02.948407 env[1384]: time="2023-10-02T20:49:02.948372538Z" level=info msg="RemoveContainer for \"844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd\"" Oct 2 20:49:02.949503 env[1384]: time="2023-10-02T20:49:02.949461693Z" level=info msg="RemoveContainer for \"844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd\"" Oct 2 20:49:02.949588 env[1384]: time="2023-10-02T20:49:02.949552413Z" level=error msg="RemoveContainer for \"844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd\" failed" error="failed to set removing state for container \"844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd\": container is already in removing state" Oct 2 20:49:02.949777 kubelet[2480]: E1002 20:49:02.949754 2480 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd\": container is already in removing state" containerID="844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd" Oct 2 20:49:02.949849 kubelet[2480]: E1002 20:49:02.949788 2480 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd": container is already in removing state; Skipping pod "cilium-cdzk5_kube-system(af891ea2-aecd-49ab-854f-ff3a42dc887f)" Oct 2 20:49:02.950148 kubelet[2480]: E1002 20:49:02.950127 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-cdzk5_kube-system(af891ea2-aecd-49ab-854f-ff3a42dc887f)\"" pod="kube-system/cilium-cdzk5" podUID=af891ea2-aecd-49ab-854f-ff3a42dc887f Oct 2 20:49:02.960172 env[1384]: time="2023-10-02T20:49:02.960109127Z" level=info msg="RemoveContainer for \"844053adf1c78955b5248e6e8375c8f1f0630b7bb87ae3ff133b64c5f43a90cd\" returns successfully" Oct 2 20:49:03.260612 systemd[1]: run-containerd-runc-k8s.io-f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e-runc.rkGDKU.mount: Deactivated successfully. Oct 2 20:49:03.260715 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e-rootfs.mount: Deactivated successfully. Oct 2 20:49:04.421778 kubelet[2480]: E1002 20:49:04.421754 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:49:05.508548 kubelet[2480]: W1002 20:49:05.508506 2480 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podaf891ea2_aecd_49ab_854f_ff3a42dc887f.slice/cri-containerd-f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e.scope WatchSource:0}: task f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e not found: not found Oct 2 20:49:09.423905 kubelet[2480]: E1002 20:49:09.423873 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:49:11.767000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:11.772652 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:49:11.772731 kernel: audit: type=1400 audit(1696279751.767:1393): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:11.794194 kernel: audit: type=1400 audit(1696279751.767:1394): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:11.767000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:11.767000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023a09e0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:49:11.843087 kernel: audit: type=1300 audit(1696279751.767:1394): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023a09e0 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:49:11.767000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:49:11.866593 kernel: audit: type=1327 audit(1696279751.767:1394): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:49:11.866705 kernel: audit: type=1400 audit(1696279751.767:1395): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:11.767000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:11.767000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023a0a00 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:49:11.915756 kernel: audit: type=1300 audit(1696279751.767:1395): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023a0a00 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:49:11.767000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:49:11.939677 kernel: audit: type=1327 audit(1696279751.767:1395): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:49:11.939796 kernel: audit: type=1400 audit(1696279751.767:1396): avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:11.767000 audit[2377]: AVC avc: denied { watch } for pid=2377 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:11.767000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023a0c60 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:49:11.988872 kernel: audit: type=1300 audit(1696279751.767:1396): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023a0c60 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:49:11.767000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:49:12.012361 kernel: audit: type=1327 audit(1696279751.767:1396): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:49:11.767000 audit[2377]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002932a40 a2=fc6 a3=0 items=0 ppid=2225 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:49:11.767000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:49:14.424926 kubelet[2480]: E1002 20:49:14.424901 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:49:17.228555 kubelet[2480]: E1002 20:49:17.228525 2480 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-cdzk5_kube-system(af891ea2-aecd-49ab-854f-ff3a42dc887f)\"" pod="kube-system/cilium-cdzk5" podUID=af891ea2-aecd-49ab-854f-ff3a42dc887f Oct 2 20:49:19.426461 kubelet[2480]: E1002 20:49:19.426436 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:49:20.689210 env[1384]: time="2023-10-02T20:49:20.689157692Z" level=info msg="StopPodSandbox for \"b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8\"" Oct 2 20:49:20.689652 env[1384]: time="2023-10-02T20:49:20.689604851Z" level=info msg="Container to stop \"f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:49:20.691072 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8-shm.mount: Deactivated successfully. Oct 2 20:49:20.707000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:49:20.707822 systemd[1]: cri-containerd-b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8.scope: Deactivated successfully. Oct 2 20:49:20.713438 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:49:20.713568 kernel: audit: type=1334 audit(1696279760.707:1397): prog-id=132 op=UNLOAD Oct 2 20:49:20.722000 audit: BPF prog-id=135 op=UNLOAD Oct 2 20:49:20.731057 kernel: audit: type=1334 audit(1696279760.722:1398): prog-id=135 op=UNLOAD Oct 2 20:49:20.750688 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8-rootfs.mount: Deactivated successfully. Oct 2 20:49:20.805322 env[1384]: time="2023-10-02T20:49:20.805276673Z" level=info msg="shim disconnected" id=b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8 Oct 2 20:49:20.805606 env[1384]: time="2023-10-02T20:49:20.805586312Z" level=warning msg="cleaning up after shim disconnected" id=b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8 namespace=k8s.io Oct 2 20:49:20.805690 env[1384]: time="2023-10-02T20:49:20.805675592Z" level=info msg="cleaning up dead shim" Oct 2 20:49:20.818922 env[1384]: time="2023-10-02T20:49:20.818880060Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:49:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3717 runtime=io.containerd.runc.v2\n" Oct 2 20:49:20.819416 env[1384]: time="2023-10-02T20:49:20.819387218Z" level=info msg="TearDown network for sandbox \"b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8\" successfully" Oct 2 20:49:20.819526 env[1384]: time="2023-10-02T20:49:20.819508697Z" level=info msg="StopPodSandbox for \"b158393b16b97c1a0a560e638b94ef041eefe653535cf7faa3b70e4475d2edc8\" returns successfully" Oct 2 20:49:20.832258 sshd[3488]: pam_unix(sshd:session): session closed for user core Oct 2 20:49:20.833000 audit[3488]: USER_END pid=3488 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:49:20.835649 systemd[1]: sshd@29-10.200.20.29:22-10.200.12.6:55460.service: Deactivated successfully. Oct 2 20:49:20.836390 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 20:49:20.836554 systemd[1]: session-32.scope: Consumed 1.147s CPU time. Oct 2 20:49:20.837698 systemd-logind[1364]: Session 32 logged out. Waiting for processes to exit. Oct 2 20:49:20.838697 systemd-logind[1364]: Removed session 32. Oct 2 20:49:20.833000 audit[3488]: CRED_DISP pid=3488 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:49:20.878845 kernel: audit: type=1106 audit(1696279760.833:1399): pid=3488 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:49:20.878954 kernel: audit: type=1104 audit(1696279760.833:1400): pid=3488 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:49:20.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.29:22-10.200.12.6:55460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:49:20.898770 kernel: audit: type=1131 audit(1696279760.833:1401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.29:22-10.200.12.6:55460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:49:20.902137 kubelet[2480]: I1002 20:49:20.902108 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-host-proc-sys-kernel\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902145 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-run\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902181 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/af891ea2-aecd-49ab-854f-ff3a42dc887f-clustermesh-secrets\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902200 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-lib-modules\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902219 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-etc-cni-netd\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902237 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-host-proc-sys-net\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902252 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-hostproc\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902273 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-xtables-lock\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902294 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/af891ea2-aecd-49ab-854f-ff3a42dc887f-hubble-tls\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902309 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-cni-path\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902329 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-config-path\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902350 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-ipsec-secrets\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902367 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-bpf-maps\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902385 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-7964b\" (UniqueName: \"kubernetes.io/projected/af891ea2-aecd-49ab-854f-ff3a42dc887f-kube-api-access-7964b\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902402 2480 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-cgroup\") pod \"af891ea2-aecd-49ab-854f-ff3a42dc887f\" (UID: \"af891ea2-aecd-49ab-854f-ff3a42dc887f\") " Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902455 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:49:20.902507 kubelet[2480]: I1002 20:49:20.902480 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:49:20.902949 kubelet[2480]: I1002 20:49:20.902496 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:49:20.902977 kubelet[2480]: I1002 20:49:20.902942 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:49:20.902977 kubelet[2480]: I1002 20:49:20.902968 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:49:20.903026 kubelet[2480]: I1002 20:49:20.902986 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:49:20.903026 kubelet[2480]: I1002 20:49:20.903014 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-hostproc" (OuterVolumeSpecName: "hostproc") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:49:20.903072 kubelet[2480]: I1002 20:49:20.903028 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:49:20.904344 kubelet[2480]: I1002 20:49:20.903199 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-cni-path" (OuterVolumeSpecName: "cni-path") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:49:20.904344 kubelet[2480]: W1002 20:49:20.903324 2480 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/af891ea2-aecd-49ab-854f-ff3a42dc887f/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:49:20.906647 kubelet[2480]: I1002 20:49:20.905404 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:49:20.906647 kubelet[2480]: I1002 20:49:20.905446 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:49:20.911549 systemd[1]: var-lib-kubelet-pods-af891ea2\x2daecd\x2d49ab\x2d854f\x2dff3a42dc887f-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:49:20.917097 systemd[1]: var-lib-kubelet-pods-af891ea2\x2daecd\x2d49ab\x2d854f\x2dff3a42dc887f-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:49:20.919182 kubelet[2480]: I1002 20:49:20.919128 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/af891ea2-aecd-49ab-854f-ff3a42dc887f-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:49:20.921536 systemd[1]: var-lib-kubelet-pods-af891ea2\x2daecd\x2d49ab\x2d854f\x2dff3a42dc887f-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d7964b.mount: Deactivated successfully. Oct 2 20:49:20.924110 kubelet[2480]: I1002 20:49:20.924077 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/af891ea2-aecd-49ab-854f-ff3a42dc887f-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:49:20.924426 kubelet[2480]: I1002 20:49:20.924407 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/af891ea2-aecd-49ab-854f-ff3a42dc887f-kube-api-access-7964b" (OuterVolumeSpecName: "kube-api-access-7964b") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "kube-api-access-7964b". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:49:20.926637 kubelet[2480]: I1002 20:49:20.926608 2480 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "af891ea2-aecd-49ab-854f-ff3a42dc887f" (UID: "af891ea2-aecd-49ab-854f-ff3a42dc887f"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:49:20.977070 kubelet[2480]: I1002 20:49:20.976981 2480 scope.go:115] "RemoveContainer" containerID="f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e" Oct 2 20:49:20.979956 env[1384]: time="2023-10-02T20:49:20.979669224Z" level=info msg="RemoveContainer for \"f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e\"" Oct 2 20:49:20.983485 systemd[1]: Removed slice kubepods-burstable-podaf891ea2_aecd_49ab_854f_ff3a42dc887f.slice. Oct 2 20:49:20.987860 env[1384]: time="2023-10-02T20:49:20.987742232Z" level=info msg="RemoveContainer for \"f921637ecfe0611da2b730a0f131ca0530758ff75a532c672bab533f7a60097e\" returns successfully" Oct 2 20:49:21.003070 kubelet[2480]: I1002 20:49:21.003039 2480 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.003747 kubelet[2480]: I1002 20:49:21.003730 2480 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-bpf-maps\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.003845 kubelet[2480]: I1002 20:49:21.003835 2480 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-7964b\" (UniqueName: \"kubernetes.io/projected/af891ea2-aecd-49ab-854f-ff3a42dc887f-kube-api-access-7964b\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.003916 kubelet[2480]: I1002 20:49:21.003907 2480 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-cgroup\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.003988 kubelet[2480]: I1002 20:49:21.003967 2480 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.004073 kubelet[2480]: I1002 20:49:21.004064 2480 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-run\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.005118 kubelet[2480]: I1002 20:49:21.005103 2480 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/af891ea2-aecd-49ab-854f-ff3a42dc887f-clustermesh-secrets\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.005223 kubelet[2480]: I1002 20:49:21.005212 2480 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-lib-modules\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.006126 kubelet[2480]: I1002 20:49:21.006106 2480 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-etc-cni-netd\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.006268 kubelet[2480]: I1002 20:49:21.006252 2480 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-host-proc-sys-net\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.006341 kubelet[2480]: I1002 20:49:21.006332 2480 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-hostproc\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.006449 kubelet[2480]: I1002 20:49:21.006441 2480 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-xtables-lock\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.006524 kubelet[2480]: I1002 20:49:21.006515 2480 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/af891ea2-aecd-49ab-854f-ff3a42dc887f-hubble-tls\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.006593 kubelet[2480]: I1002 20:49:21.006575 2480 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/af891ea2-aecd-49ab-854f-ff3a42dc887f-cni-path\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.006653 kubelet[2480]: I1002 20:49:21.006645 2480 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/af891ea2-aecd-49ab-854f-ff3a42dc887f-cilium-config-path\") on node \"ci-3510.3.0-a-5b3cc0a007\" DevicePath \"\"" Oct 2 20:49:21.231485 kubelet[2480]: I1002 20:49:21.231399 2480 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=af891ea2-aecd-49ab-854f-ff3a42dc887f path="/var/lib/kubelet/pods/af891ea2-aecd-49ab-854f-ff3a42dc887f/volumes" Oct 2 20:49:21.691122 systemd[1]: var-lib-kubelet-pods-af891ea2\x2daecd\x2d49ab\x2d854f\x2dff3a42dc887f-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:49:24.428203 kubelet[2480]: E1002 20:49:24.428179 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:49:29.429486 kubelet[2480]: E1002 20:49:29.429454 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:49:34.430117 kubelet[2480]: E1002 20:49:34.430091 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:49:34.757352 systemd[1]: cri-containerd-acdb3fdd9ab06c08aba8724cb361f75961cfa88a173b104a3859d622db72adf1.scope: Deactivated successfully. Oct 2 20:49:34.757654 systemd[1]: cri-containerd-acdb3fdd9ab06c08aba8724cb361f75961cfa88a173b104a3859d622db72adf1.scope: Consumed 3.332s CPU time. Oct 2 20:49:34.760000 audit: BPF prog-id=91 op=UNLOAD Oct 2 20:49:34.760000 audit: BPF prog-id=110 op=UNLOAD Oct 2 20:49:34.773812 kernel: audit: type=1334 audit(1696279774.760:1402): prog-id=91 op=UNLOAD Oct 2 20:49:34.773908 kernel: audit: type=1334 audit(1696279774.760:1403): prog-id=110 op=UNLOAD Oct 2 20:49:34.787034 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-acdb3fdd9ab06c08aba8724cb361f75961cfa88a173b104a3859d622db72adf1-rootfs.mount: Deactivated successfully. Oct 2 20:49:34.856235 env[1384]: time="2023-10-02T20:49:34.856186483Z" level=info msg="shim disconnected" id=acdb3fdd9ab06c08aba8724cb361f75961cfa88a173b104a3859d622db72adf1 Oct 2 20:49:34.856235 env[1384]: time="2023-10-02T20:49:34.856232443Z" level=warning msg="cleaning up after shim disconnected" id=acdb3fdd9ab06c08aba8724cb361f75961cfa88a173b104a3859d622db72adf1 namespace=k8s.io Oct 2 20:49:34.856671 env[1384]: time="2023-10-02T20:49:34.856244443Z" level=info msg="cleaning up dead shim" Oct 2 20:49:34.867792 env[1384]: time="2023-10-02T20:49:34.867743041Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:49:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3746 runtime=io.containerd.runc.v2\n" Oct 2 20:49:35.002308 kubelet[2480]: I1002 20:49:35.000432 2480 scope.go:115] "RemoveContainer" containerID="acdb3fdd9ab06c08aba8724cb361f75961cfa88a173b104a3859d622db72adf1" Oct 2 20:49:35.002716 env[1384]: time="2023-10-02T20:49:35.002676819Z" level=info msg="CreateContainer within sandbox \"07d9d7fd6f21363a801f0f698390dcb74bba9e805c68a381174a85da52d4972d\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 20:49:35.026874 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1797507167.mount: Deactivated successfully. Oct 2 20:49:35.039663 env[1384]: time="2023-10-02T20:49:35.039619842Z" level=info msg="CreateContainer within sandbox \"07d9d7fd6f21363a801f0f698390dcb74bba9e805c68a381174a85da52d4972d\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"ff389f7453befdc00903a3af0d094e564476031179e4c91811cd4ff6a803c764\"" Oct 2 20:49:35.040360 env[1384]: time="2023-10-02T20:49:35.040334239Z" level=info msg="StartContainer for \"ff389f7453befdc00903a3af0d094e564476031179e4c91811cd4ff6a803c764\"" Oct 2 20:49:35.063460 systemd[1]: Started cri-containerd-ff389f7453befdc00903a3af0d094e564476031179e4c91811cd4ff6a803c764.scope. Oct 2 20:49:35.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.114993 kernel: audit: type=1400 audit(1696279775.080:1404): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.115117 kernel: audit: type=1400 audit(1696279775.080:1405): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.132278 kernel: audit: type=1400 audit(1696279775.080:1406): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.149541 kernel: audit: type=1400 audit(1696279775.080:1407): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.166869 kernel: audit: type=1400 audit(1696279775.080:1408): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.183731 kernel: audit: type=1400 audit(1696279775.080:1409): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.200741 kernel: audit: type=1400 audit(1696279775.080:1410): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.201071 kubelet[2480]: E1002 20:49:35.201037 2480 controller.go:193] "Failed to update lease" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.29:46664->10.200.20.12:2379: read: connection timed out" Oct 2 20:49:35.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.222171 kernel: audit: type=1400 audit(1696279775.080:1411): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.080000 audit: BPF prog-id=136 op=LOAD Oct 2 20:49:35.081000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.081000 audit[3767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2225 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:49:35.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666333839663734353362656664633030393033613361663064303934 Oct 2 20:49:35.081000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.081000 audit[3767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2225 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:49:35.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666333839663734353362656664633030393033613361663064303934 Oct 2 20:49:35.081000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.081000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.081000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.081000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.081000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.081000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.081000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.081000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.081000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.081000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.081000 audit: BPF prog-id=137 op=LOAD Oct 2 20:49:35.081000 audit[3767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2225 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:49:35.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666333839663734353362656664633030393033613361663064303934 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit: BPF prog-id=138 op=LOAD Oct 2 20:49:35.097000 audit[3767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2225 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:49:35.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666333839663734353362656664633030393033613361663064303934 Oct 2 20:49:35.097000 audit: BPF prog-id=138 op=UNLOAD Oct 2 20:49:35.097000 audit: BPF prog-id=137 op=UNLOAD Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:35.097000 audit: BPF prog-id=139 op=LOAD Oct 2 20:49:35.097000 audit[3767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2225 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:49:35.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666333839663734353362656664633030393033613361663064303934 Oct 2 20:49:35.236477 env[1384]: time="2023-10-02T20:49:35.236409313Z" level=info msg="StartContainer for \"ff389f7453befdc00903a3af0d094e564476031179e4c91811cd4ff6a803c764\" returns successfully" Oct 2 20:49:36.574000 audit[3777]: AVC avc: denied { watch } for pid=3777 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:36.574000 audit[3777]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400085c000 a2=fc6 a3=0 items=0 ppid=2225 pid=3777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:49:36.574000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:49:36.575000 audit[3777]: AVC avc: denied { watch } for pid=3777 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:36.575000 audit[3777]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000154ac0 a2=fc6 a3=0 items=0 ppid=2225 pid=3777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c130,c1010 key=(null) Oct 2 20:49:36.575000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:49:39.432104 kubelet[2480]: E1002 20:49:39.432066 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:49:39.485086 kubelet[2480]: E1002 20:49:39.484957 2480 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-5b3cc0a007.178a6576700241aa", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-5b3cc0a007", UID:"b4c7dbf2e95236fe9186b8ba973ff2ee", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-5b3cc0a007"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 49, 29, 18155434, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 49, 29, 18155434, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.29:46462->10.200.20.12:2379: read: connection timed out' (will not retry!) Oct 2 20:49:41.266754 systemd[1]: cri-containerd-3b90fdc0c1cf7333bc64ec7cc453eb4b437a4d26aec318363682daaedefa3c0e.scope: Deactivated successfully. Oct 2 20:49:41.267050 systemd[1]: cri-containerd-3b90fdc0c1cf7333bc64ec7cc453eb4b437a4d26aec318363682daaedefa3c0e.scope: Consumed 3.162s CPU time. Oct 2 20:49:41.278226 kernel: kauditd_printk_skb: 55 callbacks suppressed Oct 2 20:49:41.278340 kernel: audit: type=1334 audit(1696279781.270:1424): prog-id=87 op=UNLOAD Oct 2 20:49:41.270000 audit: BPF prog-id=87 op=UNLOAD Oct 2 20:49:41.270000 audit: BPF prog-id=99 op=UNLOAD Oct 2 20:49:41.289614 kernel: audit: type=1334 audit(1696279781.270:1425): prog-id=99 op=UNLOAD Oct 2 20:49:41.302409 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3b90fdc0c1cf7333bc64ec7cc453eb4b437a4d26aec318363682daaedefa3c0e-rootfs.mount: Deactivated successfully. Oct 2 20:49:41.368542 env[1384]: time="2023-10-02T20:49:41.368499910Z" level=info msg="shim disconnected" id=3b90fdc0c1cf7333bc64ec7cc453eb4b437a4d26aec318363682daaedefa3c0e Oct 2 20:49:41.369077 env[1384]: time="2023-10-02T20:49:41.369055868Z" level=warning msg="cleaning up after shim disconnected" id=3b90fdc0c1cf7333bc64ec7cc453eb4b437a4d26aec318363682daaedefa3c0e namespace=k8s.io Oct 2 20:49:41.369179 env[1384]: time="2023-10-02T20:49:41.369154107Z" level=info msg="cleaning up dead shim" Oct 2 20:49:41.381121 env[1384]: time="2023-10-02T20:49:41.381082904Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:49:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3804 runtime=io.containerd.runc.v2\n" Oct 2 20:49:42.012553 kubelet[2480]: I1002 20:49:42.012531 2480 scope.go:115] "RemoveContainer" containerID="3b90fdc0c1cf7333bc64ec7cc453eb4b437a4d26aec318363682daaedefa3c0e" Oct 2 20:49:42.014793 env[1384]: time="2023-10-02T20:49:42.014743096Z" level=info msg="CreateContainer within sandbox \"13c2b437d9302dd9d91869451961cb2725a67e465a111fd5c8286b5a36562384\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 20:49:42.043218 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2210056924.mount: Deactivated successfully. Oct 2 20:49:42.048298 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3572920364.mount: Deactivated successfully. Oct 2 20:49:42.064503 env[1384]: time="2023-10-02T20:49:42.064443277Z" level=info msg="CreateContainer within sandbox \"13c2b437d9302dd9d91869451961cb2725a67e465a111fd5c8286b5a36562384\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"e55510b0ddb5be936705d598d82019a7b630ec5595647a06ad1426d29e1d5b21\"" Oct 2 20:49:42.065179 env[1384]: time="2023-10-02T20:49:42.065137435Z" level=info msg="StartContainer for \"e55510b0ddb5be936705d598d82019a7b630ec5595647a06ad1426d29e1d5b21\"" Oct 2 20:49:42.085348 systemd[1]: Started cri-containerd-e55510b0ddb5be936705d598d82019a7b630ec5595647a06ad1426d29e1d5b21.scope. Oct 2 20:49:42.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.137927 kernel: audit: type=1400 audit(1696279782.103:1426): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.138051 kernel: audit: type=1400 audit(1696279782.103:1427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.138092 kernel: audit: type=1400 audit(1696279782.103:1428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.171112 kernel: audit: type=1400 audit(1696279782.103:1429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.188183 kernel: audit: type=1400 audit(1696279782.103:1430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.188471 kernel: audit: type=1400 audit(1696279782.103:1431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.225534 kernel: audit: type=1400 audit(1696279782.103:1432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.242404 kernel: audit: type=1400 audit(1696279782.103:1433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit: BPF prog-id=140 op=LOAD Oct 2 20:49:42.103000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[3826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2199 pid=3826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:49:42.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535353531306230646462356265393336373035643539386438323031 Oct 2 20:49:42.103000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[3826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2199 pid=3826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:49:42.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535353531306230646462356265393336373035643539386438323031 Oct 2 20:49:42.103000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.103000 audit: BPF prog-id=141 op=LOAD Oct 2 20:49:42.103000 audit[3826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2199 pid=3826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:49:42.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535353531306230646462356265393336373035643539386438323031 Oct 2 20:49:42.119000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.119000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.119000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.119000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.119000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.119000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.119000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.119000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.119000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.119000 audit: BPF prog-id=142 op=LOAD Oct 2 20:49:42.119000 audit[3826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2199 pid=3826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:49:42.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535353531306230646462356265393336373035643539386438323031 Oct 2 20:49:42.136000 audit: BPF prog-id=142 op=UNLOAD Oct 2 20:49:42.136000 audit: BPF prog-id=141 op=UNLOAD Oct 2 20:49:42.136000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.136000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.136000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.136000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.136000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.136000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.136000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.136000 audit[3826]: AVC avc: denied { perfmon } for pid=3826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.136000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.136000 audit[3826]: AVC avc: denied { bpf } for pid=3826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:49:42.136000 audit: BPF prog-id=143 op=LOAD Oct 2 20:49:42.136000 audit[3826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2199 pid=3826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:49:42.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535353531306230646462356265393336373035643539386438323031 Oct 2 20:49:42.260982 env[1384]: time="2023-10-02T20:49:42.260914771Z" level=info msg="StartContainer for \"e55510b0ddb5be936705d598d82019a7b630ec5595647a06ad1426d29e1d5b21\" returns successfully" Oct 2 20:49:44.433621 kubelet[2480]: E1002 20:49:44.433588 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:49:45.202024 kubelet[2480]: E1002 20:49:45.201991 2480 controller.go:193] "Failed to update lease" err="Put \"https://10.200.20.29:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-5b3cc0a007?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 20:49:45.437105 kubelet[2480]: I1002 20:49:45.437076 2480 status_manager.go:809] "Failed to get status for pod" podUID=b8d3065fcb35173868035a1ee46bf22e pod="kube-system/kube-controller-manager-ci-3510.3.0-a-5b3cc0a007" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.29:46546->10.200.20.12:2379: read: connection timed out" Oct 2 20:49:49.434946 kubelet[2480]: E1002 20:49:49.434921 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:49:54.436309 kubelet[2480]: E1002 20:49:54.436258 2480 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:49:55.191188 kernel: kauditd_printk_skb: 49 callbacks suppressed Oct 2 20:49:55.191332 kernel: audit: type=1400 audit(1696279795.185:1444): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:55.185000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:55.202777 kubelet[2480]: E1002 20:49:55.202745 2480 controller.go:193] "Failed to update lease" err="Put \"https://10.200.20.29:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-5b3cc0a007?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 20:49:55.185000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=40083c1980 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:49:55.240172 kernel: audit: type=1300 audit(1696279795.185:1444): arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=40083c1980 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:49:55.185000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:49:55.263882 kernel: audit: type=1327 audit(1696279795.185:1444): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:49:55.264021 kernel: audit: type=1400 audit(1696279795.190:1445): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:55.190000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:55.190000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4010b75780 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:49:55.311245 kernel: audit: type=1300 audit(1696279795.190:1445): arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4010b75780 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:49:55.190000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:49:55.334598 kernel: audit: type=1327 audit(1696279795.190:1445): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:49:55.335300 kernel: audit: type=1400 audit(1696279795.206:1446): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:55.206000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:55.206000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=20 a1=4009e3f470 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:49:55.382854 kernel: audit: type=1300 audit(1696279795.206:1446): arch=c00000b7 syscall=27 success=no exit=-13 a0=20 a1=4009e3f470 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:49:55.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:49:55.406400 kernel: audit: type=1327 audit(1696279795.206:1446): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:49:55.406520 kernel: audit: type=1400 audit(1696279795.206:1447): avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:55.206000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:55.206000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=20 a1=4009e3f4a0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:49:55.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:49:55.206000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:55.206000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=20 a1=4010b75800 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:49:55.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:49:55.206000 audit[2307]: AVC avc: denied { watch } for pid=2307 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:49:55.206000 audit[2307]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=20 a1=4009e3f5f0 a2=fc6 a3=0 items=0 ppid=2175 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c413 key=(null) Oct 2 20:49:55.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3239002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:49:57.029688 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#174 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.029996 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#172 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.037760 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#176 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.046659 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#177 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.054613 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#175 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.062919 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#178 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.071150 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#180 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.079692 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#173 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.088439 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#185 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.096642 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#186 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.104770 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#179 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.112766 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#183 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.121014 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#181 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.128936 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#187 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.137042 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#188 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.144716 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#189 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.165365 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#189 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.165585 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#188 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.174114 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#187 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.182649 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#181 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.191548 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#183 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.199873 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#179 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.207928 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#186 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.216295 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#185 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.224325 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#173 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.232564 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#180 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.240392 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#178 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.248423 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#175 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.257464 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#177 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.266341 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#176 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.274550 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#172 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 20:49:57.282604 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#174 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001