Oct 2 21:00:51.239487 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 21:00:51.239506 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 21:00:51.239514 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Oct 2 21:00:51.239521 kernel: printk: bootconsole [pl11] enabled Oct 2 21:00:51.239526 kernel: efi: EFI v2.70 by EDK II Oct 2 21:00:51.239532 kernel: efi: ACPI 2.0=0x3fd8d018 SMBIOS=0x3fd6a000 SMBIOS 3.0=0x3fd68000 MEMATTR=0x3ef3f098 RNG=0x3fd8d998 MEMRESERVE=0x37eb7f98 Oct 2 21:00:51.239538 kernel: random: crng init done Oct 2 21:00:51.239544 kernel: ACPI: Early table checksum verification disabled Oct 2 21:00:51.239550 kernel: ACPI: RSDP 0x000000003FD8D018 000024 (v02 VRTUAL) Oct 2 21:00:51.239555 kernel: ACPI: XSDT 0x000000003FD8DF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:00:51.239561 kernel: ACPI: FACP 0x000000003FD8DC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:00:51.239568 kernel: ACPI: DSDT 0x000000003EBD6018 01DEC0 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 21:00:51.239573 kernel: ACPI: DBG2 0x000000003FD8DB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:00:51.239579 kernel: ACPI: GTDT 0x000000003FD8DD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:00:51.239585 kernel: ACPI: OEM0 0x000000003FD8D098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:00:51.239591 kernel: ACPI: SPCR 0x000000003FD8DA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:00:51.239598 kernel: ACPI: APIC 0x000000003FD8D818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:00:51.239606 kernel: ACPI: SRAT 0x000000003FD8D198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:00:51.239612 kernel: ACPI: PPTT 0x000000003FD8D418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Oct 2 21:00:51.239618 kernel: ACPI: BGRT 0x000000003FD8DE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:00:51.239623 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Oct 2 21:00:51.239629 kernel: NUMA: Failed to initialise from firmware Oct 2 21:00:51.239636 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 21:00:51.239642 kernel: NUMA: NODE_DATA [mem 0x1bf7f1900-0x1bf7f6fff] Oct 2 21:00:51.239648 kernel: Zone ranges: Oct 2 21:00:51.239654 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Oct 2 21:00:51.239659 kernel: DMA32 empty Oct 2 21:00:51.239666 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 21:00:51.239672 kernel: Movable zone start for each node Oct 2 21:00:51.239677 kernel: Early memory node ranges Oct 2 21:00:51.239683 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Oct 2 21:00:51.239689 kernel: node 0: [mem 0x0000000000824000-0x000000003ec84fff] Oct 2 21:00:51.239694 kernel: node 0: [mem 0x000000003ec85000-0x000000003ecadfff] Oct 2 21:00:51.239700 kernel: node 0: [mem 0x000000003ecae000-0x000000003fd2dfff] Oct 2 21:00:51.239706 kernel: node 0: [mem 0x000000003fd2e000-0x000000003fd81fff] Oct 2 21:00:51.239711 kernel: node 0: [mem 0x000000003fd82000-0x000000003fd8dfff] Oct 2 21:00:51.239717 kernel: node 0: [mem 0x000000003fd8e000-0x000000003fd91fff] Oct 2 21:00:51.239723 kernel: node 0: [mem 0x000000003fd92000-0x000000003fffffff] Oct 2 21:00:51.239728 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 21:00:51.239736 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 21:00:51.239745 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Oct 2 21:00:51.239751 kernel: psci: probing for conduit method from ACPI. Oct 2 21:00:51.239757 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 21:00:51.239763 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 21:00:51.239809 kernel: psci: MIGRATE_INFO_TYPE not supported. Oct 2 21:00:51.239818 kernel: psci: SMC Calling Convention v1.4 Oct 2 21:00:51.239824 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Oct 2 21:00:51.239830 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Oct 2 21:00:51.239836 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 21:00:51.239843 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 21:00:51.239849 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 21:00:51.239855 kernel: Detected PIPT I-cache on CPU0 Oct 2 21:00:51.239861 kernel: CPU features: detected: GIC system register CPU interface Oct 2 21:00:51.239867 kernel: CPU features: detected: Hardware dirty bit management Oct 2 21:00:51.239874 kernel: CPU features: detected: Spectre-BHB Oct 2 21:00:51.239880 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 21:00:51.239888 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 21:00:51.239894 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 21:00:51.239900 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Oct 2 21:00:51.239906 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Oct 2 21:00:51.239912 kernel: Policy zone: Normal Oct 2 21:00:51.239920 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 21:00:51.239926 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 21:00:51.239932 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 21:00:51.239938 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 21:00:51.239945 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 21:00:51.239952 kernel: software IO TLB: mapped [mem 0x000000003abd6000-0x000000003ebd6000] (64MB) Oct 2 21:00:51.239959 kernel: Memory: 3992060K/4194160K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 202100K reserved, 0K cma-reserved) Oct 2 21:00:51.239965 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 21:00:51.239971 kernel: trace event string verifier disabled Oct 2 21:00:51.239977 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 21:00:51.239985 kernel: rcu: RCU event tracing is enabled. Oct 2 21:00:51.239991 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 21:00:51.239997 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 21:00:51.240004 kernel: Tracing variant of Tasks RCU enabled. Oct 2 21:00:51.240010 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 21:00:51.240016 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 21:00:51.240023 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 21:00:51.240029 kernel: GICv3: 960 SPIs implemented Oct 2 21:00:51.240035 kernel: GICv3: 0 Extended SPIs implemented Oct 2 21:00:51.240042 kernel: GICv3: Distributor has no Range Selector support Oct 2 21:00:51.240048 kernel: Root IRQ handler: gic_handle_irq Oct 2 21:00:51.240054 kernel: GICv3: 16 PPIs implemented Oct 2 21:00:51.240060 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Oct 2 21:00:51.240066 kernel: ITS: No ITS available, not enabling LPIs Oct 2 21:00:51.240073 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 21:00:51.240079 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 21:00:51.240085 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 21:00:51.240091 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 21:00:51.240098 kernel: Console: colour dummy device 80x25 Oct 2 21:00:51.240105 kernel: printk: console [tty1] enabled Oct 2 21:00:51.240111 kernel: ACPI: Core revision 20210730 Oct 2 21:00:51.240118 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 21:00:51.240124 kernel: pid_max: default: 32768 minimum: 301 Oct 2 21:00:51.240131 kernel: LSM: Security Framework initializing Oct 2 21:00:51.240137 kernel: SELinux: Initializing. Oct 2 21:00:51.240143 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 21:00:51.240150 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 21:00:51.240157 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Oct 2 21:00:51.240164 kernel: Hyper-V: Host Build 10.0.22477.1341-1-0 Oct 2 21:00:51.240170 kernel: rcu: Hierarchical SRCU implementation. Oct 2 21:00:51.240177 kernel: Remapping and enabling EFI services. Oct 2 21:00:51.240184 kernel: smp: Bringing up secondary CPUs ... Oct 2 21:00:51.240190 kernel: Detected PIPT I-cache on CPU1 Oct 2 21:00:51.240197 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Oct 2 21:00:51.240204 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 21:00:51.240210 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 21:00:51.240218 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 21:00:51.240224 kernel: SMP: Total of 2 processors activated. Oct 2 21:00:51.240231 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 21:00:51.240237 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Oct 2 21:00:51.240244 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 21:00:51.240250 kernel: CPU features: detected: CRC32 instructions Oct 2 21:00:51.240256 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 21:00:51.240263 kernel: CPU features: detected: LSE atomic instructions Oct 2 21:00:51.240269 kernel: CPU features: detected: Privileged Access Never Oct 2 21:00:51.240277 kernel: CPU: All CPU(s) started at EL1 Oct 2 21:00:51.240283 kernel: alternatives: patching kernel code Oct 2 21:00:51.240293 kernel: devtmpfs: initialized Oct 2 21:00:51.240302 kernel: KASLR enabled Oct 2 21:00:51.240309 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 21:00:51.240315 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 21:00:51.240322 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 21:00:51.240328 kernel: SMBIOS 3.1.0 present. Oct 2 21:00:51.240335 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/16/2022 Oct 2 21:00:51.240342 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 21:00:51.240350 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 21:00:51.240357 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 21:00:51.240364 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 21:00:51.240371 kernel: audit: initializing netlink subsys (disabled) Oct 2 21:00:51.240378 kernel: audit: type=2000 audit(0.089:1): state=initialized audit_enabled=0 res=1 Oct 2 21:00:51.240385 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 21:00:51.240391 kernel: cpuidle: using governor menu Oct 2 21:00:51.240400 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 21:00:51.240407 kernel: ASID allocator initialised with 32768 entries Oct 2 21:00:51.240413 kernel: ACPI: bus type PCI registered Oct 2 21:00:51.240420 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 21:00:51.240427 kernel: Serial: AMBA PL011 UART driver Oct 2 21:00:51.240434 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 21:00:51.240441 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 21:00:51.240448 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 21:00:51.240454 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 21:00:51.240463 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 21:00:51.240469 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 21:00:51.240476 kernel: ACPI: Added _OSI(Module Device) Oct 2 21:00:51.240482 kernel: ACPI: Added _OSI(Processor Device) Oct 2 21:00:51.240489 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 21:00:51.240496 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 21:00:51.240503 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 21:00:51.240509 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 21:00:51.240516 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 21:00:51.240524 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 21:00:51.240531 kernel: ACPI: Interpreter enabled Oct 2 21:00:51.240538 kernel: ACPI: Using GIC for interrupt routing Oct 2 21:00:51.240545 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Oct 2 21:00:51.240551 kernel: printk: console [ttyAMA0] enabled Oct 2 21:00:51.240558 kernel: printk: bootconsole [pl11] disabled Oct 2 21:00:51.240565 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Oct 2 21:00:51.240572 kernel: iommu: Default domain type: Translated Oct 2 21:00:51.240578 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 21:00:51.240586 kernel: vgaarb: loaded Oct 2 21:00:51.240593 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 21:00:51.240601 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 21:00:51.240608 kernel: PTP clock support registered Oct 2 21:00:51.240614 kernel: Registered efivars operations Oct 2 21:00:51.240621 kernel: No ACPI PMU IRQ for CPU0 Oct 2 21:00:51.240627 kernel: No ACPI PMU IRQ for CPU1 Oct 2 21:00:51.240634 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 21:00:51.240641 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 21:00:51.240649 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 21:00:51.240656 kernel: pnp: PnP ACPI init Oct 2 21:00:51.240663 kernel: pnp: PnP ACPI: found 0 devices Oct 2 21:00:51.240669 kernel: NET: Registered PF_INET protocol family Oct 2 21:00:51.240676 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 21:00:51.240683 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 21:00:51.240690 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 21:00:51.240697 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 21:00:51.240704 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 21:00:51.240712 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 21:00:51.240719 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 21:00:51.240725 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 21:00:51.240732 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 21:00:51.240738 kernel: PCI: CLS 0 bytes, default 64 Oct 2 21:00:51.240745 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Oct 2 21:00:51.240752 kernel: kvm [1]: HYP mode not available Oct 2 21:00:51.240759 kernel: Initialise system trusted keyrings Oct 2 21:00:51.240766 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 21:00:51.240790 kernel: Key type asymmetric registered Oct 2 21:00:51.240797 kernel: Asymmetric key parser 'x509' registered Oct 2 21:00:51.240804 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 21:00:51.240811 kernel: io scheduler mq-deadline registered Oct 2 21:00:51.240817 kernel: io scheduler kyber registered Oct 2 21:00:51.240824 kernel: io scheduler bfq registered Oct 2 21:00:51.240831 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 21:00:51.240838 kernel: thunder_xcv, ver 1.0 Oct 2 21:00:51.240844 kernel: thunder_bgx, ver 1.0 Oct 2 21:00:51.240853 kernel: nicpf, ver 1.0 Oct 2 21:00:51.240859 kernel: nicvf, ver 1.0 Oct 2 21:00:51.241274 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 21:00:51.241341 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T21:00:50 UTC (1696280450) Oct 2 21:00:51.241351 kernel: efifb: probing for efifb Oct 2 21:00:51.241358 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 21:00:51.241365 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 21:00:51.241371 kernel: efifb: scrolling: redraw Oct 2 21:00:51.241381 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 21:00:51.241389 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 21:00:51.241395 kernel: fb0: EFI VGA frame buffer device Oct 2 21:00:51.241402 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Oct 2 21:00:51.241409 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 21:00:51.241415 kernel: NET: Registered PF_INET6 protocol family Oct 2 21:00:51.241422 kernel: Segment Routing with IPv6 Oct 2 21:00:51.241429 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 21:00:51.241435 kernel: NET: Registered PF_PACKET protocol family Oct 2 21:00:51.241443 kernel: Key type dns_resolver registered Oct 2 21:00:51.241450 kernel: registered taskstats version 1 Oct 2 21:00:51.241456 kernel: Loading compiled-in X.509 certificates Oct 2 21:00:51.241463 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 21:00:51.241470 kernel: Key type .fscrypt registered Oct 2 21:00:51.241477 kernel: Key type fscrypt-provisioning registered Oct 2 21:00:51.241483 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 21:00:51.241490 kernel: ima: Allocated hash algorithm: sha1 Oct 2 21:00:51.241497 kernel: ima: No architecture policies found Oct 2 21:00:51.241504 kernel: Freeing unused kernel memory: 34560K Oct 2 21:00:51.241511 kernel: Run /init as init process Oct 2 21:00:51.241518 kernel: with arguments: Oct 2 21:00:51.241524 kernel: /init Oct 2 21:00:51.241530 kernel: with environment: Oct 2 21:00:51.241537 kernel: HOME=/ Oct 2 21:00:51.241543 kernel: TERM=linux Oct 2 21:00:51.241550 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 21:00:51.241559 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 21:00:51.241569 systemd[1]: Detected virtualization microsoft. Oct 2 21:00:51.241577 systemd[1]: Detected architecture arm64. Oct 2 21:00:51.241584 systemd[1]: Running in initrd. Oct 2 21:00:51.241591 systemd[1]: No hostname configured, using default hostname. Oct 2 21:00:51.241598 systemd[1]: Hostname set to . Oct 2 21:00:51.241606 systemd[1]: Initializing machine ID from random generator. Oct 2 21:00:51.241613 systemd[1]: Queued start job for default target initrd.target. Oct 2 21:00:51.241622 systemd[1]: Started systemd-ask-password-console.path. Oct 2 21:00:51.241629 systemd[1]: Reached target cryptsetup.target. Oct 2 21:00:51.241636 systemd[1]: Reached target paths.target. Oct 2 21:00:51.241643 systemd[1]: Reached target slices.target. Oct 2 21:00:51.241650 systemd[1]: Reached target swap.target. Oct 2 21:00:51.241657 systemd[1]: Reached target timers.target. Oct 2 21:00:51.241665 systemd[1]: Listening on iscsid.socket. Oct 2 21:00:51.241672 systemd[1]: Listening on iscsiuio.socket. Oct 2 21:00:51.241681 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 21:00:51.241689 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 21:00:51.241696 systemd[1]: Listening on systemd-journald.socket. Oct 2 21:00:51.241703 systemd[1]: Listening on systemd-networkd.socket. Oct 2 21:00:51.241710 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 21:00:51.241717 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 21:00:51.241724 systemd[1]: Reached target sockets.target. Oct 2 21:00:51.241732 systemd[1]: Starting kmod-static-nodes.service... Oct 2 21:00:51.241739 systemd[1]: Finished network-cleanup.service. Oct 2 21:00:51.241747 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 21:00:51.241755 systemd[1]: Starting systemd-journald.service... Oct 2 21:00:51.241762 systemd[1]: Starting systemd-modules-load.service... Oct 2 21:00:51.241769 systemd[1]: Starting systemd-resolved.service... Oct 2 21:00:51.241798 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 21:00:51.241805 systemd[1]: Finished kmod-static-nodes.service. Oct 2 21:00:51.241817 systemd-journald[276]: Journal started Oct 2 21:00:51.241857 systemd-journald[276]: Runtime Journal (/run/log/journal/60bf6451e39b4d51ae89b331d06eda4d) is 8.0M, max 78.6M, 70.6M free. Oct 2 21:00:51.254578 systemd-modules-load[277]: Inserted module 'overlay' Oct 2 21:00:51.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.291788 systemd[1]: Started systemd-journald.service. Oct 2 21:00:51.291826 kernel: audit: type=1130 audit(1696280451.260:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.292292 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 21:00:51.392088 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 21:00:51.392111 kernel: audit: type=1130 audit(1696280451.291:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.392121 kernel: audit: type=1130 audit(1696280451.334:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.392130 kernel: Bridge firewalling registered Oct 2 21:00:51.392140 kernel: SCSI subsystem initialized Oct 2 21:00:51.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.316206 systemd-resolved[278]: Positive Trust Anchors: Oct 2 21:00:51.458350 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 21:00:51.458376 kernel: audit: type=1130 audit(1696280451.396:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.458387 kernel: device-mapper: uevent: version 1.0.3 Oct 2 21:00:51.458396 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 21:00:51.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.316217 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 21:00:51.498569 kernel: audit: type=1130 audit(1696280451.470:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.316246 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 21:00:51.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.319252 systemd-resolved[278]: Defaulting to hostname 'linux'. Oct 2 21:00:51.580449 kernel: audit: type=1130 audit(1696280451.502:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.334504 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 21:00:51.373046 systemd-modules-load[277]: Inserted module 'br_netfilter' Oct 2 21:00:51.397391 systemd[1]: Started systemd-resolved.service. Oct 2 21:00:51.445132 systemd-modules-load[277]: Inserted module 'dm_multipath' Oct 2 21:00:51.486798 systemd[1]: Finished systemd-modules-load.service. Oct 2 21:00:51.503111 systemd[1]: Reached target nss-lookup.target. Oct 2 21:00:51.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.579207 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 21:00:51.700532 kernel: audit: type=1130 audit(1696280451.642:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.700556 kernel: audit: type=1130 audit(1696280451.678:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.589901 systemd[1]: Starting systemd-sysctl.service... Oct 2 21:00:51.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.613428 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 21:00:51.757377 kernel: audit: type=1130 audit(1696280451.705:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:51.634733 systemd[1]: Finished systemd-sysctl.service. Oct 2 21:00:51.653734 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 21:00:51.679480 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 21:00:51.709551 systemd[1]: Starting dracut-cmdline.service... Oct 2 21:00:51.781662 dracut-cmdline[299]: dracut-dracut-053 Oct 2 21:00:51.786191 dracut-cmdline[299]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 21:00:51.967794 kernel: Loading iSCSI transport class v2.0-870. Oct 2 21:00:51.978790 kernel: iscsi: registered transport (tcp) Oct 2 21:00:51.998989 kernel: iscsi: registered transport (qla4xxx) Oct 2 21:00:51.999010 kernel: QLogic iSCSI HBA Driver Oct 2 21:00:52.100728 systemd[1]: Finished dracut-cmdline.service. Oct 2 21:00:52.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:52.106225 systemd[1]: Starting dracut-pre-udev.service... Oct 2 21:00:52.198795 kernel: raid6: neonx8 gen() 13809 MB/s Oct 2 21:00:52.219804 kernel: raid6: neonx8 xor() 10835 MB/s Oct 2 21:00:52.240802 kernel: raid6: neonx4 gen() 13458 MB/s Oct 2 21:00:52.262784 kernel: raid6: neonx4 xor() 11006 MB/s Oct 2 21:00:52.283788 kernel: raid6: neonx2 gen() 13116 MB/s Oct 2 21:00:52.304791 kernel: raid6: neonx2 xor() 10223 MB/s Oct 2 21:00:52.330811 kernel: raid6: neonx1 gen() 10514 MB/s Oct 2 21:00:52.354788 kernel: raid6: neonx1 xor() 8685 MB/s Oct 2 21:00:52.376784 kernel: raid6: int64x8 gen() 6294 MB/s Oct 2 21:00:52.397784 kernel: raid6: int64x8 xor() 3549 MB/s Oct 2 21:00:52.418783 kernel: raid6: int64x4 gen() 7246 MB/s Oct 2 21:00:52.446802 kernel: raid6: int64x4 xor() 3824 MB/s Oct 2 21:00:52.469788 kernel: raid6: int64x2 gen() 6102 MB/s Oct 2 21:00:52.490783 kernel: raid6: int64x2 xor() 3320 MB/s Oct 2 21:00:52.512784 kernel: raid6: int64x1 gen() 5046 MB/s Oct 2 21:00:52.549312 kernel: raid6: int64x1 xor() 2632 MB/s Oct 2 21:00:52.549325 kernel: raid6: using algorithm neonx8 gen() 13809 MB/s Oct 2 21:00:52.549333 kernel: raid6: .... xor() 10835 MB/s, rmw enabled Oct 2 21:00:52.557457 kernel: raid6: using neon recovery algorithm Oct 2 21:00:52.581826 kernel: xor: measuring software checksum speed Oct 2 21:00:52.581838 kernel: 8regs : 17304 MB/sec Oct 2 21:00:52.586411 kernel: 32regs : 20755 MB/sec Oct 2 21:00:52.590850 kernel: arm64_neon : 27845 MB/sec Oct 2 21:00:52.590859 kernel: xor: using function: arm64_neon (27845 MB/sec) Oct 2 21:00:52.663793 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 21:00:52.683231 systemd[1]: Finished dracut-pre-udev.service. Oct 2 21:00:52.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:52.692000 audit: BPF prog-id=7 op=LOAD Oct 2 21:00:52.692000 audit: BPF prog-id=8 op=LOAD Oct 2 21:00:52.692741 systemd[1]: Starting systemd-udevd.service... Oct 2 21:00:52.711334 systemd-udevd[475]: Using default interface naming scheme 'v252'. Oct 2 21:00:52.718853 systemd[1]: Started systemd-udevd.service. Oct 2 21:00:52.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:52.744499 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 21:00:52.776494 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Oct 2 21:00:52.844245 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 21:00:52.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:52.851059 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 21:00:52.895202 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 21:00:52.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:52.952803 kernel: hv_vmbus: Vmbus version:5.3 Oct 2 21:00:52.964802 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 21:00:52.964853 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 21:00:52.979795 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 21:00:52.989587 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 21:00:52.999676 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 21:00:53.012384 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 21:00:53.019340 kernel: scsi host0: storvsc_host_t Oct 2 21:00:53.019523 kernel: scsi host1: storvsc_host_t Oct 2 21:00:53.019548 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 21:00:53.041838 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 21:00:53.058794 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 21:00:53.075404 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 21:00:53.075610 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 21:00:53.076817 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 21:00:53.092819 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 21:00:53.093039 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 21:00:53.097307 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 21:00:53.105716 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 21:00:53.105875 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 21:00:53.112801 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:00:53.117788 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 21:00:53.181801 kernel: hv_netvsc 000d3afb-d41c-000d-3afb-d41c000d3afb eth0: VF slot 1 added Oct 2 21:00:53.197022 kernel: hv_vmbus: registering driver hv_pci Oct 2 21:00:53.197069 kernel: hv_pci 20fcc8e8-e5ed-45b7-a0d3-5ab717395e8f: PCI VMBus probing: Using version 0x10004 Oct 2 21:00:53.213377 kernel: hv_pci 20fcc8e8-e5ed-45b7-a0d3-5ab717395e8f: PCI host bridge to bus e5ed:00 Oct 2 21:00:53.213556 kernel: pci_bus e5ed:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Oct 2 21:00:53.220694 kernel: pci_bus e5ed:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 21:00:53.233354 kernel: pci e5ed:00:02.0: [15b3:1018] type 00 class 0x020000 Oct 2 21:00:53.245214 kernel: pci e5ed:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 21:00:53.265936 kernel: pci e5ed:00:02.0: enabling Extended Tags Oct 2 21:00:53.476913 kernel: pci e5ed:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at e5ed:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Oct 2 21:00:53.490969 kernel: pci_bus e5ed:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 21:00:53.491139 kernel: pci e5ed:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 21:00:53.536814 kernel: mlx5_core e5ed:00:02.0: firmware version: 16.31.2424 Oct 2 21:00:53.682616 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 21:00:53.707803 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (539) Oct 2 21:00:53.718081 kernel: mlx5_core e5ed:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Oct 2 21:00:53.744552 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 21:00:53.864126 kernel: hv_netvsc 000d3afb-d41c-000d-3afb-d41c000d3afb eth0: VF registering: eth1 Oct 2 21:00:53.864324 kernel: mlx5_core e5ed:00:02.0 eth1: joined to eth0 Oct 2 21:00:53.869707 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 21:00:53.890789 kernel: mlx5_core e5ed:00:02.0 enP58861s1: renamed from eth1 Oct 2 21:00:53.901722 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 21:00:53.908829 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 21:00:53.926792 systemd[1]: Starting disk-uuid.service... Oct 2 21:00:53.964651 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:00:53.970791 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:00:54.972259 disk-uuid[602]: The operation has completed successfully. Oct 2 21:00:54.977807 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:00:55.069320 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 21:00:55.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.069419 systemd[1]: Finished disk-uuid.service. Oct 2 21:00:55.129380 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 21:00:55.129404 kernel: audit: type=1130 audit(1696280455.073:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.129416 kernel: audit: type=1131 audit(1696280455.073:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.075018 systemd[1]: Starting verity-setup.service... Oct 2 21:00:55.172807 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 21:00:55.382303 systemd[1]: Found device dev-mapper-usr.device. Oct 2 21:00:55.388512 systemd[1]: Mounting sysusr-usr.mount... Oct 2 21:00:55.401622 systemd[1]: Finished verity-setup.service. Oct 2 21:00:55.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.432803 kernel: audit: type=1130 audit(1696280455.405:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.490798 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 21:00:55.491628 systemd[1]: Mounted sysusr-usr.mount. Oct 2 21:00:55.499670 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 21:00:55.500422 systemd[1]: Starting ignition-setup.service... Oct 2 21:00:55.514011 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 21:00:55.571780 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:00:55.571830 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:00:55.576906 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:00:55.655367 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 21:00:55.756800 systemd[1]: Finished ignition-setup.service. Oct 2 21:00:55.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.781990 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 21:00:55.787818 kernel: audit: type=1130 audit(1696280455.761:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.793098 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 21:00:55.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.822000 audit: BPF prog-id=9 op=LOAD Oct 2 21:00:55.829392 kernel: audit: type=1130 audit(1696280455.802:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.829429 kernel: audit: type=1334 audit(1696280455.822:23): prog-id=9 op=LOAD Oct 2 21:00:55.828931 systemd[1]: Starting systemd-networkd.service... Oct 2 21:00:55.877199 systemd-networkd[850]: lo: Link UP Oct 2 21:00:55.877210 systemd-networkd[850]: lo: Gained carrier Oct 2 21:00:55.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.877606 systemd-networkd[850]: Enumeration completed Oct 2 21:00:55.923633 kernel: audit: type=1130 audit(1696280455.886:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.877700 systemd[1]: Started systemd-networkd.service. Oct 2 21:00:55.887442 systemd[1]: Reached target network.target. Oct 2 21:00:55.969984 kernel: mlx5_core e5ed:00:02.0 enP58861s1: Link up Oct 2 21:00:55.891307 systemd-networkd[850]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:00:55.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:55.915723 systemd[1]: Starting iscsiuio.service... Oct 2 21:00:55.951805 systemd[1]: Started iscsiuio.service. Oct 2 21:00:55.995600 systemd[1]: Starting iscsid.service... Oct 2 21:00:56.013664 kernel: audit: type=1130 audit(1696280455.977:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:56.013687 iscsid[855]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 21:00:56.013687 iscsid[855]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 21:00:56.013687 iscsid[855]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 21:00:56.013687 iscsid[855]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 21:00:56.013687 iscsid[855]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 21:00:56.013687 iscsid[855]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 21:00:56.222666 kernel: hv_netvsc 000d3afb-d41c-000d-3afb-d41c000d3afb eth0: Data path switched to VF: enP58861s1 Oct 2 21:00:56.222897 kernel: audit: type=1130 audit(1696280456.017:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:56.222911 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 21:00:56.222920 kernel: audit: type=1130 audit(1696280456.149:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:56.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:56.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:56.010125 systemd[1]: Started iscsid.service. Oct 2 21:00:56.078675 systemd[1]: Starting dracut-initqueue.service... Oct 2 21:00:56.079380 systemd-networkd[850]: enP58861s1: Link UP Oct 2 21:00:56.079456 systemd-networkd[850]: eth0: Link UP Oct 2 21:00:56.079568 systemd-networkd[850]: eth0: Gained carrier Oct 2 21:00:56.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:56.126599 systemd[1]: Finished dracut-initqueue.service. Oct 2 21:00:56.136908 systemd-networkd[850]: enP58861s1: Gained carrier Oct 2 21:00:56.150317 systemd[1]: Reached target remote-fs-pre.target. Oct 2 21:00:56.188351 systemd-networkd[850]: eth0: DHCPv4 address 10.200.20.18/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:00:56.189311 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 21:00:56.194685 systemd[1]: Reached target remote-fs.target. Oct 2 21:00:56.208761 systemd[1]: Starting dracut-pre-mount.service... Oct 2 21:00:56.255351 systemd[1]: Finished dracut-pre-mount.service. Oct 2 21:00:57.433945 systemd-networkd[850]: eth0: Gained IPv6LL Oct 2 21:00:58.591939 ignition[849]: Ignition 2.14.0 Oct 2 21:00:58.591950 ignition[849]: Stage: fetch-offline Oct 2 21:00:58.592002 ignition[849]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:00:58.592024 ignition[849]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:00:58.722959 ignition[849]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:00:58.723128 ignition[849]: parsed url from cmdline: "" Oct 2 21:00:58.735723 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 21:00:58.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:58.723132 ignition[849]: no config URL provided Oct 2 21:00:58.751898 systemd[1]: Starting ignition-fetch.service... Oct 2 21:00:58.723137 ignition[849]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 21:00:58.723147 ignition[849]: no config at "/usr/lib/ignition/user.ign" Oct 2 21:00:58.723152 ignition[849]: failed to fetch config: resource requires networking Oct 2 21:00:58.723518 ignition[849]: Ignition finished successfully Oct 2 21:00:58.782151 ignition[875]: Ignition 2.14.0 Oct 2 21:00:58.782158 ignition[875]: Stage: fetch Oct 2 21:00:58.782284 ignition[875]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:00:58.782303 ignition[875]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:00:58.805192 ignition[875]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:00:58.805321 ignition[875]: parsed url from cmdline: "" Oct 2 21:00:58.805325 ignition[875]: no config URL provided Oct 2 21:00:58.805329 ignition[875]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 21:00:58.805337 ignition[875]: no config at "/usr/lib/ignition/user.ign" Oct 2 21:00:58.805367 ignition[875]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 21:00:58.838640 ignition[875]: GET result: OK Oct 2 21:00:58.838672 ignition[875]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 21:00:58.887307 ignition[875]: opening config device: "/dev/sr0" Oct 2 21:00:58.887675 ignition[875]: getting drive status for "/dev/sr0" Oct 2 21:00:58.887721 ignition[875]: drive status: OK Oct 2 21:00:58.887794 ignition[875]: mounting config device Oct 2 21:00:58.887805 ignition[875]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure3771761908" Oct 2 21:00:58.926029 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 21:00:58.925763 systemd[1]: tmp-ignition\x2dazure3771761908.mount: Deactivated successfully. Oct 2 21:00:58.924588 ignition[875]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure3771761908" Oct 2 21:00:58.924600 ignition[875]: checking for config drive Oct 2 21:00:58.925003 ignition[875]: reading config Oct 2 21:00:58.925450 ignition[875]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure3771761908" Oct 2 21:00:58.925568 ignition[875]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure3771761908" Oct 2 21:00:58.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:58.962858 unknown[875]: fetched base config from "system" Oct 2 21:00:58.925594 ignition[875]: config has been read from custom data Oct 2 21:00:58.962866 unknown[875]: fetched base config from "system" Oct 2 21:00:58.925718 ignition[875]: parsing config with SHA512: f839901a7654f59b58e24c13394ecac8334b8da96f44b19e16bca9f7d187208300c12486a71e16bd0a0b3d7a2ece2bdb389528c511c9b3d0b8082718508a5038 Oct 2 21:00:58.962871 unknown[875]: fetched user config from "azure" Oct 2 21:00:58.963419 ignition[875]: fetch: fetch complete Oct 2 21:00:58.968340 systemd[1]: Finished ignition-fetch.service. Oct 2 21:00:59.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:58.963425 ignition[875]: fetch: fetch passed Oct 2 21:00:58.974741 systemd[1]: Starting ignition-kargs.service... Oct 2 21:00:58.963464 ignition[875]: Ignition finished successfully Oct 2 21:00:59.014495 systemd[1]: Finished ignition-kargs.service. Oct 2 21:00:59.002278 ignition[883]: Ignition 2.14.0 Oct 2 21:00:59.022075 systemd[1]: Starting ignition-disks.service... Oct 2 21:00:59.002285 ignition[883]: Stage: kargs Oct 2 21:00:59.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:59.080639 systemd[1]: Finished ignition-disks.service. Oct 2 21:00:59.002389 ignition[883]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:00:59.086108 systemd[1]: Reached target initrd-root-device.target. Oct 2 21:00:59.002407 ignition[883]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:00:59.095381 systemd[1]: Reached target local-fs-pre.target. Oct 2 21:00:59.011482 ignition[883]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:00:59.105652 systemd[1]: Reached target local-fs.target. Oct 2 21:00:59.013380 ignition[883]: kargs: kargs passed Oct 2 21:00:59.117819 systemd[1]: Reached target sysinit.target. Oct 2 21:00:59.013460 ignition[883]: Ignition finished successfully Oct 2 21:00:59.133679 systemd[1]: Reached target basic.target. Oct 2 21:00:59.066589 ignition[889]: Ignition 2.14.0 Oct 2 21:00:59.154123 systemd[1]: Starting systemd-fsck-root.service... Oct 2 21:00:59.066594 ignition[889]: Stage: disks Oct 2 21:00:59.066697 ignition[889]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:00:59.066718 ignition[889]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:00:59.076117 ignition[889]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:00:59.077426 ignition[889]: disks: disks passed Oct 2 21:00:59.077475 ignition[889]: Ignition finished successfully Oct 2 21:00:59.286660 systemd-fsck[897]: ROOT: clean, 603/7326000 files, 481067/7359488 blocks Oct 2 21:00:59.296703 systemd[1]: Finished systemd-fsck-root.service. Oct 2 21:00:59.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:00:59.302911 systemd[1]: Mounting sysroot.mount... Oct 2 21:00:59.344818 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 21:00:59.345183 systemd[1]: Mounted sysroot.mount. Oct 2 21:00:59.362191 systemd[1]: Reached target initrd-root-fs.target. Oct 2 21:00:59.394410 systemd[1]: Mounting sysroot-usr.mount... Oct 2 21:00:59.399455 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 21:00:59.405466 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 21:00:59.405506 systemd[1]: Reached target ignition-diskful.target. Oct 2 21:00:59.416446 systemd[1]: Mounted sysroot-usr.mount. Oct 2 21:00:59.457448 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 21:00:59.463382 systemd[1]: Starting initrd-setup-root.service... Oct 2 21:00:59.493973 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (907) Oct 2 21:00:59.494921 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:00:59.506151 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:00:59.506175 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:00:59.514858 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 21:00:59.526569 initrd-setup-root[912]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 21:00:59.560678 initrd-setup-root[938]: cut: /sysroot/etc/group: No such file or directory Oct 2 21:00:59.574276 initrd-setup-root[946]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 21:00:59.590602 initrd-setup-root[954]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 21:01:00.004859 systemd[1]: Finished initrd-setup-root.service. Oct 2 21:01:00.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:00.010662 systemd[1]: Starting ignition-mount.service... Oct 2 21:01:00.019170 systemd[1]: Starting sysroot-boot.service... Oct 2 21:01:00.066545 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 21:01:00.066664 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 21:01:00.082705 systemd[1]: Finished sysroot-boot.service. Oct 2 21:01:00.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:00.097202 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 21:01:00.097225 kernel: audit: type=1130 audit(1696280460.087:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:00.146327 ignition[976]: INFO : Ignition 2.14.0 Oct 2 21:01:00.146327 ignition[976]: INFO : Stage: mount Oct 2 21:01:00.170113 ignition[976]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:01:00.170113 ignition[976]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:01:00.170113 ignition[976]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:01:00.170113 ignition[976]: INFO : mount: mount passed Oct 2 21:01:00.170113 ignition[976]: INFO : Ignition finished successfully Oct 2 21:01:00.239460 kernel: audit: type=1130 audit(1696280460.174:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:00.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:00.169857 systemd[1]: Finished ignition-mount.service. Oct 2 21:01:00.607217 coreos-metadata[906]: Oct 02 21:01:00.607 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 21:01:00.616047 coreos-metadata[906]: Oct 02 21:01:00.609 INFO Fetch successful Oct 2 21:01:00.648050 coreos-metadata[906]: Oct 02 21:01:00.648 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 21:01:00.682816 coreos-metadata[906]: Oct 02 21:01:00.682 INFO Fetch successful Oct 2 21:01:00.690514 coreos-metadata[906]: Oct 02 21:01:00.690 INFO wrote hostname ci-3510.3.0-a-9c05479676 to /sysroot/etc/hostname Oct 2 21:01:00.700052 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 21:01:00.737069 kernel: audit: type=1130 audit(1696280460.705:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:00.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:00.706989 systemd[1]: Starting ignition-files.service... Oct 2 21:01:00.754985 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 21:01:00.785945 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (985) Oct 2 21:01:00.800980 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:01:00.800996 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:01:00.801005 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:01:00.810720 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 21:01:00.859392 ignition[1004]: INFO : Ignition 2.14.0 Oct 2 21:01:00.859392 ignition[1004]: INFO : Stage: files Oct 2 21:01:00.874024 ignition[1004]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:01:00.874024 ignition[1004]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:01:00.874024 ignition[1004]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:01:00.874024 ignition[1004]: DEBUG : files: compiled without relabeling support, skipping Oct 2 21:01:00.909889 ignition[1004]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 21:01:00.909889 ignition[1004]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 21:01:00.959431 ignition[1004]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 21:01:00.973865 ignition[1004]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 21:01:00.973865 ignition[1004]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 21:01:00.972330 unknown[1004]: wrote ssh authorized keys file for user: core Oct 2 21:01:00.995447 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 21:01:00.995447 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 21:01:01.162538 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 21:01:01.380487 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 21:01:01.380487 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 21:01:01.380487 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 21:01:01.380487 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-arm64.tar.gz: attempt #1 Oct 2 21:01:01.736437 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 21:01:02.020897 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: 4c7e4541123cbd6f1d6fec1f827395cd58d65716c0998de790f965485738b6d6257c0dc46fd7f66403166c299f6d5bf9ff30b6e1ff9afbb071f17005e834518c Oct 2 21:01:02.052511 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 21:01:02.052511 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 21:01:02.052511 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubeadm: attempt #1 Oct 2 21:01:02.171955 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 21:01:03.142806 kernel: mlx5_core e5ed:00:02.0: poll_health:739:(pid 1006): device's health compromised - reached miss count Oct 2 21:01:03.170036 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 46c9f489062bdb84574703f7339d140d7e42c9c71b367cd860071108a3c1d38fabda2ef69f9c0ff88f7c80e88d38f96ab2248d4c9a6c9c60b0a4c20fd640d0db Oct 2 21:01:03.187824 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 21:01:03.187824 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 21:01:03.187824 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubelet: attempt #1 Oct 2 21:01:03.230293 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 21:01:05.298048 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 0e4ee1f23bf768c49d09beb13a6b5fad6efc8e3e685e7c5610188763e3af55923fb46158b5e76973a0f9a055f9b30d525b467c53415f965536adc2f04d9cf18d Oct 2 21:01:05.315503 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 21:01:05.315503 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 21:01:05.315503 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubectl: attempt #1 Oct 2 21:01:05.366481 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 21:01:06.213575 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 3672fda0beebbbd636a2088f427463cbad32683ea4fbb1df61650552e63846b6a47db803ccb70c3db0a8f24746a23a5632bdc15a3fb78f4f7d833e7f86763c2a Oct 2 21:01:06.232972 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 21:01:06.232972 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 21:01:06.271418 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 21:01:06.271418 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 21:01:06.271418 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 21:01:06.567070 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 21:01:06.922315 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 21:01:06.933935 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 21:01:06.933935 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 21:01:06.933935 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 21:01:06.933935 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 21:01:06.933935 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 21:01:06.933935 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 21:01:07.039949 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (1006) Oct 2 21:01:07.008631 systemd[1]: mnt-oem3185771706.mount: Deactivated successfully. Oct 2 21:01:07.051658 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3185771706" Oct 2 21:01:07.051658 ignition[1004]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3185771706": device or resource busy Oct 2 21:01:07.051658 ignition[1004]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3185771706", trying btrfs: device or resource busy Oct 2 21:01:07.051658 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3185771706" Oct 2 21:01:07.051658 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3185771706" Oct 2 21:01:07.051658 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem3185771706" Oct 2 21:01:07.051658 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem3185771706" Oct 2 21:01:07.051658 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 21:01:07.051658 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 21:01:07.051658 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 21:01:07.051658 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3106678240" Oct 2 21:01:07.051658 ignition[1004]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3106678240": device or resource busy Oct 2 21:01:07.051658 ignition[1004]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3106678240", trying btrfs: device or resource busy Oct 2 21:01:07.051658 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3106678240" Oct 2 21:01:07.421344 kernel: audit: type=1130 audit(1696280467.061:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.421375 kernel: audit: type=1130 audit(1696280467.170:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.421386 kernel: audit: type=1131 audit(1696280467.170:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.421395 kernel: audit: type=1130 audit(1696280467.237:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.421405 kernel: audit: type=1130 audit(1696280467.393:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.237000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.026679 systemd[1]: mnt-oem3106678240.mount: Deactivated successfully. Oct 2 21:01:07.430792 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3106678240" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem3106678240" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem3106678240" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(1a): [started] setting preset to enabled for "waagent.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(1a): [finished] setting preset to enabled for "waagent.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 21:01:07.430792 ignition[1004]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 21:01:07.907807 kernel: audit: type=1131 audit(1696280467.423:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.907841 kernel: audit: type=1130 audit(1696280467.524:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.907852 kernel: audit: type=1131 audit(1696280467.657:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.042739 systemd[1]: Finished ignition-files.service. Oct 2 21:01:07.917065 ignition[1004]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 21:01:07.917065 ignition[1004]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 21:01:07.917065 ignition[1004]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-critools.service" Oct 2 21:01:07.917065 ignition[1004]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 21:01:07.917065 ignition[1004]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 21:01:07.917065 ignition[1004]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 21:01:07.917065 ignition[1004]: INFO : files: files passed Oct 2 21:01:07.917065 ignition[1004]: INFO : Ignition finished successfully Oct 2 21:01:08.099066 kernel: audit: type=1131 audit(1696280467.923:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.099091 kernel: audit: type=1131 audit(1696280467.995:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.063347 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 21:01:08.110327 initrd-setup-root-after-ignition[1029]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 21:01:07.115881 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 21:01:07.116791 systemd[1]: Starting ignition-quench.service... Oct 2 21:01:07.165569 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 21:01:08.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.165661 systemd[1]: Finished ignition-quench.service. Oct 2 21:01:07.227198 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 21:01:07.280223 systemd[1]: Reached target ignition-complete.target. Oct 2 21:01:07.308269 systemd[1]: Starting initrd-parse-etc.service... Oct 2 21:01:08.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.207504 ignition[1042]: INFO : Ignition 2.14.0 Oct 2 21:01:08.207504 ignition[1042]: INFO : Stage: umount Oct 2 21:01:08.207504 ignition[1042]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:01:08.207504 ignition[1042]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:01:08.207504 ignition[1042]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:01:08.207504 ignition[1042]: INFO : umount: umount passed Oct 2 21:01:08.207504 ignition[1042]: INFO : Ignition finished successfully Oct 2 21:01:08.212000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.307000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.388644 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 21:01:07.388747 systemd[1]: Finished initrd-parse-etc.service. Oct 2 21:01:08.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.424278 systemd[1]: Reached target initrd-fs.target. Oct 2 21:01:07.439157 systemd[1]: Reached target initrd.target. Oct 2 21:01:07.487445 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 21:01:07.488331 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 21:01:07.516740 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 21:01:07.560223 systemd[1]: Starting initrd-cleanup.service... Oct 2 21:01:07.585878 systemd[1]: Stopped target nss-lookup.target. Oct 2 21:01:07.599872 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 21:01:08.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.614047 systemd[1]: Stopped target timers.target. Oct 2 21:01:07.631164 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 21:01:07.631404 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 21:01:08.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.690362 systemd[1]: Stopped target initrd.target. Oct 2 21:01:08.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.710035 systemd[1]: Stopped target basic.target. Oct 2 21:01:08.481000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.735981 systemd[1]: Stopped target ignition-complete.target. Oct 2 21:01:08.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.489000 audit: BPF prog-id=6 op=UNLOAD Oct 2 21:01:07.764159 systemd[1]: Stopped target ignition-diskful.target. Oct 2 21:01:07.778947 systemd[1]: Stopped target initrd-root-device.target. Oct 2 21:01:08.507000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.800104 systemd[1]: Stopped target remote-fs.target. Oct 2 21:01:08.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.819553 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 21:01:08.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.837931 systemd[1]: Stopped target sysinit.target. Oct 2 21:01:08.548000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.867511 systemd[1]: Stopped target local-fs.target. Oct 2 21:01:07.883051 systemd[1]: Stopped target local-fs-pre.target. Oct 2 21:01:07.898573 systemd[1]: Stopped target swap.target. Oct 2 21:01:08.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.912512 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 21:01:07.912663 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 21:01:07.969787 systemd[1]: Stopped target cryptsetup.target. Oct 2 21:01:08.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.982601 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 21:01:08.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:07.982740 systemd[1]: Stopped dracut-initqueue.service. Oct 2 21:01:08.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.023949 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 21:01:08.024116 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 21:01:08.689218 kernel: hv_netvsc 000d3afb-d41c-000d-3afb-d41c000d3afb eth0: Data path switched from VF: enP58861s1 Oct 2 21:01:08.059454 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 21:01:08.693000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.059575 systemd[1]: Stopped ignition-files.service. Oct 2 21:01:08.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.704000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.067426 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 21:01:08.067525 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 21:01:08.089112 systemd[1]: Stopping ignition-mount.service... Oct 2 21:01:08.111277 systemd[1]: Stopping iscsiuio.service... Oct 2 21:01:08.143594 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 21:01:08.143990 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 21:01:08.165900 systemd[1]: Stopping sysroot-boot.service... Oct 2 21:01:08.183972 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 21:01:08.184137 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 21:01:08.202906 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 21:01:08.203000 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 21:01:08.214215 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 21:01:08.214364 systemd[1]: Stopped iscsiuio.service. Oct 2 21:01:08.232800 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 21:01:08.233458 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 21:01:08.233567 systemd[1]: Stopped ignition-mount.service. Oct 2 21:01:08.249153 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 21:01:08.249363 systemd[1]: Stopped ignition-disks.service. Oct 2 21:01:08.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:08.292988 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 21:01:08.293043 systemd[1]: Stopped ignition-kargs.service. Oct 2 21:01:08.308073 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 21:01:08.308125 systemd[1]: Stopped ignition-fetch.service. Oct 2 21:01:08.318317 systemd[1]: Stopped target network.target. Oct 2 21:01:08.333062 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 21:01:08.333137 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 21:01:08.355398 systemd[1]: Stopped target paths.target. Oct 2 21:01:08.370462 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 21:01:08.378499 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 21:01:08.922873 iscsid[855]: iscsid shutting down. Oct 2 21:01:08.383952 systemd[1]: Stopped target slices.target. Oct 2 21:01:08.395478 systemd[1]: Stopped target sockets.target. Oct 2 21:01:08.404481 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 21:01:08.404519 systemd[1]: Closed iscsid.socket. Oct 2 21:01:08.412858 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 21:01:08.412898 systemd[1]: Closed iscsiuio.socket. Oct 2 21:01:08.421331 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 21:01:08.421391 systemd[1]: Stopped ignition-setup.service. Oct 2 21:01:08.430964 systemd[1]: Stopping systemd-networkd.service... Oct 2 21:01:08.440792 systemd-networkd[850]: eth0: DHCPv6 lease lost Oct 2 21:01:08.922000 audit: BPF prog-id=9 op=UNLOAD Oct 2 21:01:08.443709 systemd[1]: Stopping systemd-resolved.service... Oct 2 21:01:08.452616 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 21:01:08.452722 systemd[1]: Stopped systemd-networkd.service. Oct 2 21:01:08.463416 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 21:01:08.463497 systemd[1]: Finished initrd-cleanup.service. Oct 2 21:01:08.473477 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 21:01:08.473571 systemd[1]: Stopped systemd-resolved.service. Oct 2 21:01:08.482169 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 21:01:08.482263 systemd[1]: Stopped sysroot-boot.service. Oct 2 21:01:08.491065 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 21:01:08.491105 systemd[1]: Closed systemd-networkd.socket. Oct 2 21:01:08.499027 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 21:01:08.499071 systemd[1]: Stopped initrd-setup-root.service. Oct 2 21:01:08.509108 systemd[1]: Stopping network-cleanup.service... Oct 2 21:01:08.518580 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 21:01:08.518643 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 21:01:08.524160 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 21:01:08.524248 systemd[1]: Stopped systemd-sysctl.service. Oct 2 21:01:08.538235 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 21:01:08.923803 systemd-journald[276]: Received SIGTERM from PID 1 (n/a). Oct 2 21:01:08.538286 systemd[1]: Stopped systemd-modules-load.service. Oct 2 21:01:08.549443 systemd[1]: Stopping systemd-udevd.service... Oct 2 21:01:08.569821 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 21:01:08.576182 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 21:01:08.576346 systemd[1]: Stopped systemd-udevd.service. Oct 2 21:01:08.585716 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 21:01:08.585755 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 21:01:08.594167 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 21:01:08.594203 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 21:01:08.604288 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 21:01:08.604333 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 21:01:08.612877 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 21:01:08.612924 systemd[1]: Stopped dracut-cmdline.service. Oct 2 21:01:08.622630 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 21:01:08.622668 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 21:01:08.645718 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 21:01:08.682087 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 21:01:08.682174 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 21:01:08.694682 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 21:01:08.694848 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 21:01:08.811834 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 21:01:08.811949 systemd[1]: Stopped network-cleanup.service. Oct 2 21:01:08.824005 systemd[1]: Reached target initrd-switch-root.target. Oct 2 21:01:08.838476 systemd[1]: Starting initrd-switch-root.service... Oct 2 21:01:08.876159 systemd[1]: Switching root. Oct 2 21:01:08.924451 systemd-journald[276]: Journal stopped Oct 2 21:01:20.701028 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 21:01:20.701049 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 21:01:20.701059 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 21:01:20.701069 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 21:01:20.701077 kernel: SELinux: policy capability open_perms=1 Oct 2 21:01:20.701084 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 21:01:20.701093 kernel: SELinux: policy capability always_check_network=0 Oct 2 21:01:20.701101 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 21:01:20.701111 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 21:01:20.701118 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 21:01:20.701127 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 21:01:20.701137 systemd[1]: Successfully loaded SELinux policy in 252.299ms. Oct 2 21:01:20.701148 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 34.414ms. Oct 2 21:01:20.701158 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 21:01:20.701169 systemd[1]: Detected virtualization microsoft. Oct 2 21:01:20.701178 systemd[1]: Detected architecture arm64. Oct 2 21:01:20.701186 systemd[1]: Detected first boot. Oct 2 21:01:20.701196 systemd[1]: Hostname set to . Oct 2 21:01:20.701204 systemd[1]: Initializing machine ID from random generator. Oct 2 21:01:20.701213 systemd[1]: Populated /etc with preset unit settings. Oct 2 21:01:20.701222 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:01:20.701232 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:01:20.701243 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:01:20.701252 kernel: kauditd_printk_skb: 39 callbacks suppressed Oct 2 21:01:20.701261 kernel: audit: type=1334 audit(1696280479.816:87): prog-id=12 op=LOAD Oct 2 21:01:20.701269 kernel: audit: type=1334 audit(1696280479.816:88): prog-id=3 op=UNLOAD Oct 2 21:01:20.701277 kernel: audit: type=1334 audit(1696280479.824:89): prog-id=13 op=LOAD Oct 2 21:01:20.701286 kernel: audit: type=1334 audit(1696280479.835:90): prog-id=14 op=LOAD Oct 2 21:01:20.701294 kernel: audit: type=1334 audit(1696280479.835:91): prog-id=4 op=UNLOAD Oct 2 21:01:20.701305 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 21:01:20.701314 kernel: audit: type=1334 audit(1696280479.835:92): prog-id=5 op=UNLOAD Oct 2 21:01:20.701322 systemd[1]: Stopped iscsid.service. Oct 2 21:01:20.701331 kernel: audit: type=1334 audit(1696280479.843:93): prog-id=15 op=LOAD Oct 2 21:01:20.701340 kernel: audit: type=1334 audit(1696280479.843:94): prog-id=12 op=UNLOAD Oct 2 21:01:20.701348 kernel: audit: type=1334 audit(1696280479.851:95): prog-id=16 op=LOAD Oct 2 21:01:20.701356 kernel: audit: type=1334 audit(1696280479.862:96): prog-id=17 op=LOAD Oct 2 21:01:20.701367 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 21:01:20.701376 systemd[1]: Stopped initrd-switch-root.service. Oct 2 21:01:20.701385 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 21:01:20.701394 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 21:01:20.701406 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 21:01:20.701415 systemd[1]: Created slice system-getty.slice. Oct 2 21:01:20.701424 systemd[1]: Created slice system-modprobe.slice. Oct 2 21:01:20.701433 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 21:01:20.701442 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 21:01:20.701453 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 21:01:20.701462 systemd[1]: Created slice user.slice. Oct 2 21:01:20.701471 systemd[1]: Started systemd-ask-password-console.path. Oct 2 21:01:20.701480 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 21:01:20.701489 systemd[1]: Set up automount boot.automount. Oct 2 21:01:20.701499 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 21:01:20.701508 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 21:01:20.701518 systemd[1]: Stopped target initrd-fs.target. Oct 2 21:01:20.701527 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 21:01:20.701538 systemd[1]: Reached target integritysetup.target. Oct 2 21:01:20.701547 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 21:01:20.701556 systemd[1]: Reached target remote-fs.target. Oct 2 21:01:20.701566 systemd[1]: Reached target slices.target. Oct 2 21:01:20.701575 systemd[1]: Reached target swap.target. Oct 2 21:01:20.701584 systemd[1]: Reached target torcx.target. Oct 2 21:01:20.701594 systemd[1]: Reached target veritysetup.target. Oct 2 21:01:20.701603 systemd[1]: Listening on systemd-coredump.socket. Oct 2 21:01:20.701614 systemd[1]: Listening on systemd-initctl.socket. Oct 2 21:01:20.701623 systemd[1]: Listening on systemd-networkd.socket. Oct 2 21:01:20.701632 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 21:01:20.701641 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 21:01:20.701652 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 21:01:20.701662 systemd[1]: Mounting dev-hugepages.mount... Oct 2 21:01:20.701671 systemd[1]: Mounting dev-mqueue.mount... Oct 2 21:01:20.701680 systemd[1]: Mounting media.mount... Oct 2 21:01:20.701689 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 21:01:20.701699 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 21:01:20.701708 systemd[1]: Mounting tmp.mount... Oct 2 21:01:20.701718 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 21:01:20.701728 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 21:01:20.701738 systemd[1]: Starting kmod-static-nodes.service... Oct 2 21:01:20.701748 systemd[1]: Starting modprobe@configfs.service... Oct 2 21:01:20.701757 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 21:01:20.701766 systemd[1]: Starting modprobe@drm.service... Oct 2 21:01:20.701785 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 21:01:20.701794 systemd[1]: Starting modprobe@fuse.service... Oct 2 21:01:20.701804 systemd[1]: Starting modprobe@loop.service... Oct 2 21:01:20.701813 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 21:01:20.701823 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 21:01:20.701834 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 21:01:20.701843 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 21:01:20.701853 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 21:01:20.701862 systemd[1]: Stopped systemd-journald.service. Oct 2 21:01:20.701871 kernel: fuse: init (API version 7.34) Oct 2 21:01:20.701879 systemd[1]: systemd-journald.service: Consumed 4.193s CPU time. Oct 2 21:01:20.701888 kernel: loop: module loaded Oct 2 21:01:20.701897 systemd[1]: Starting systemd-journald.service... Oct 2 21:01:20.701908 systemd[1]: Starting systemd-modules-load.service... Oct 2 21:01:20.701918 systemd[1]: Starting systemd-network-generator.service... Oct 2 21:01:20.701928 systemd[1]: Starting systemd-remount-fs.service... Oct 2 21:01:20.701938 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 21:01:20.701947 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 21:01:20.701956 systemd[1]: Stopped verity-setup.service. Oct 2 21:01:20.701966 systemd[1]: Mounted dev-hugepages.mount. Oct 2 21:01:20.701978 systemd-journald[1181]: Journal started Oct 2 21:01:20.702018 systemd-journald[1181]: Runtime Journal (/run/log/journal/35cedf95ebb647bb918a1dc0c8f0e43d) is 8.0M, max 78.6M, 70.6M free. Oct 2 21:01:10.892000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 21:01:11.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 21:01:11.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 21:01:11.618000 audit: BPF prog-id=10 op=LOAD Oct 2 21:01:11.618000 audit: BPF prog-id=10 op=UNLOAD Oct 2 21:01:11.618000 audit: BPF prog-id=11 op=LOAD Oct 2 21:01:11.618000 audit: BPF prog-id=11 op=UNLOAD Oct 2 21:01:19.816000 audit: BPF prog-id=12 op=LOAD Oct 2 21:01:19.816000 audit: BPF prog-id=3 op=UNLOAD Oct 2 21:01:19.824000 audit: BPF prog-id=13 op=LOAD Oct 2 21:01:19.835000 audit: BPF prog-id=14 op=LOAD Oct 2 21:01:19.835000 audit: BPF prog-id=4 op=UNLOAD Oct 2 21:01:19.835000 audit: BPF prog-id=5 op=UNLOAD Oct 2 21:01:19.843000 audit: BPF prog-id=15 op=LOAD Oct 2 21:01:19.843000 audit: BPF prog-id=12 op=UNLOAD Oct 2 21:01:19.851000 audit: BPF prog-id=16 op=LOAD Oct 2 21:01:19.862000 audit: BPF prog-id=17 op=LOAD Oct 2 21:01:19.862000 audit: BPF prog-id=13 op=UNLOAD Oct 2 21:01:19.862000 audit: BPF prog-id=14 op=UNLOAD Oct 2 21:01:19.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:19.888000 audit: BPF prog-id=15 op=UNLOAD Oct 2 21:01:19.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:19.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:19.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.544000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.559000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.581000 audit: BPF prog-id=18 op=LOAD Oct 2 21:01:20.581000 audit: BPF prog-id=19 op=LOAD Oct 2 21:01:20.581000 audit: BPF prog-id=20 op=LOAD Oct 2 21:01:20.581000 audit: BPF prog-id=16 op=UNLOAD Oct 2 21:01:20.581000 audit: BPF prog-id=17 op=UNLOAD Oct 2 21:01:20.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.698000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 21:01:20.698000 audit[1181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=fffff6bfd060 a2=4000 a3=1 items=0 ppid=1 pid=1181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:01:20.698000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 21:01:19.816313 systemd[1]: Queued start job for default target multi-user.target. Oct 2 21:01:12.798460 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:01:19.864483 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 21:01:12.838564 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 21:01:19.865094 systemd[1]: systemd-journald.service: Consumed 4.193s CPU time. Oct 2 21:01:12.838587 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 21:01:12.838628 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 21:01:12.838638 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 21:01:12.838677 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 21:01:12.838690 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 21:01:12.838931 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 21:01:12.838963 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 21:01:12.838975 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 21:01:12.839497 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 21:01:12.839529 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 21:01:12.839546 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 21:01:12.839560 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 21:01:12.839578 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 21:01:12.839591 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 21:01:18.979400 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:18Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:01:18.979654 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:18Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:01:18.979741 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:18Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:01:18.979917 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:18Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:01:18.979965 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:18Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 21:01:18.980016 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:01:18Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 21:01:20.712379 systemd[1]: Started systemd-journald.service. Oct 2 21:01:20.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.712811 systemd[1]: Mounted dev-mqueue.mount. Oct 2 21:01:20.717131 systemd[1]: Mounted media.mount. Oct 2 21:01:20.721621 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 21:01:20.728490 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 21:01:20.738325 systemd[1]: Mounted tmp.mount. Oct 2 21:01:20.746258 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 21:01:20.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.757342 systemd[1]: Finished kmod-static-nodes.service. Oct 2 21:01:20.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.766291 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 21:01:20.766421 systemd[1]: Finished modprobe@configfs.service. Oct 2 21:01:20.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.771889 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 21:01:20.772003 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 21:01:20.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.777104 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 21:01:20.777220 systemd[1]: Finished modprobe@drm.service. Oct 2 21:01:20.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.781926 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 21:01:20.782045 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 21:01:20.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.786000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.787281 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 21:01:20.787396 systemd[1]: Finished modprobe@fuse.service. Oct 2 21:01:20.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.791000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.792172 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 21:01:20.792311 systemd[1]: Finished modprobe@loop.service. Oct 2 21:01:20.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.797331 systemd[1]: Finished systemd-modules-load.service. Oct 2 21:01:20.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.802581 systemd[1]: Finished systemd-network-generator.service. Oct 2 21:01:20.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.808157 systemd[1]: Finished systemd-remount-fs.service. Oct 2 21:01:20.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.813454 systemd[1]: Reached target network-pre.target. Oct 2 21:01:20.819361 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 21:01:20.828186 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 21:01:20.839693 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 21:01:20.870692 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 21:01:20.876742 systemd[1]: Starting systemd-journal-flush.service... Oct 2 21:01:20.881710 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 21:01:20.883267 systemd[1]: Starting systemd-random-seed.service... Oct 2 21:01:20.888301 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 21:01:20.889472 systemd[1]: Starting systemd-sysctl.service... Oct 2 21:01:20.896346 systemd[1]: Starting systemd-sysusers.service... Oct 2 21:01:20.903962 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 21:01:20.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.909690 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 21:01:20.915590 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 21:01:20.934992 systemd[1]: Starting systemd-udev-settle.service... Oct 2 21:01:20.973000 systemd[1]: Finished systemd-random-seed.service. Oct 2 21:01:20.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:20.978449 systemd[1]: Reached target first-boot-complete.target. Oct 2 21:01:20.985711 systemd-journald[1181]: Time spent on flushing to /var/log/journal/35cedf95ebb647bb918a1dc0c8f0e43d is 16.220ms for 1118 entries. Oct 2 21:01:20.985711 systemd-journald[1181]: System Journal (/var/log/journal/35cedf95ebb647bb918a1dc0c8f0e43d) is 8.0M, max 2.6G, 2.6G free. Oct 2 21:01:21.044059 systemd-journald[1181]: Received client request to flush runtime journal. Oct 2 21:01:21.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:21.009031 systemd[1]: Finished systemd-sysctl.service. Oct 2 21:01:21.047491 udevadm[1195]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 21:01:21.047696 systemd[1]: Finished systemd-journal-flush.service. Oct 2 21:01:21.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:21.965186 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 21:01:21.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:22.070482 systemd[1]: Finished systemd-sysusers.service. Oct 2 21:01:22.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:22.075000 audit: BPF prog-id=21 op=LOAD Oct 2 21:01:22.075000 audit: BPF prog-id=22 op=LOAD Oct 2 21:01:22.075000 audit: BPF prog-id=7 op=UNLOAD Oct 2 21:01:22.075000 audit: BPF prog-id=8 op=UNLOAD Oct 2 21:01:22.076805 systemd[1]: Starting systemd-udevd.service... Oct 2 21:01:22.097592 systemd-udevd[1198]: Using default interface naming scheme 'v252'. Oct 2 21:01:22.244057 systemd[1]: Started systemd-udevd.service. Oct 2 21:01:22.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:22.258000 audit: BPF prog-id=23 op=LOAD Oct 2 21:01:22.259720 systemd[1]: Starting systemd-networkd.service... Oct 2 21:01:22.300643 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 21:01:22.340000 audit: BPF prog-id=24 op=LOAD Oct 2 21:01:22.340000 audit: BPF prog-id=25 op=LOAD Oct 2 21:01:22.340000 audit: BPF prog-id=26 op=LOAD Oct 2 21:01:22.342461 systemd[1]: Starting systemd-userdbd.service... Oct 2 21:01:22.387855 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 21:01:22.387923 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 21:01:22.388000 audit[1204]: AVC avc: denied { confidentiality } for pid=1204 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 21:01:22.403873 kernel: hv_vmbus: registering driver hv_balloon Oct 2 21:01:22.403942 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 21:01:22.403957 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 21:01:22.415540 kernel: hv_balloon: Memory hot add disabled on ARM64 Oct 2 21:01:22.422546 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 21:01:22.422666 kernel: hv_vmbus: registering driver hv_utils Oct 2 21:01:22.459636 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 21:01:22.459717 kernel: Console: switching to colour dummy device 80x25 Oct 2 21:01:22.459553 systemd[1]: Started systemd-userdbd.service. Oct 2 21:01:22.471329 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 21:01:22.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:22.388000 audit[1204]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaab00519ae0 a1=aa2c a2=ffffa95824b0 a3=aaab00479010 items=10 ppid=1198 pid=1204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:01:22.388000 audit: CWD cwd="/" Oct 2 21:01:22.388000 audit: PATH item=0 name=(null) inode=11025 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:01:22.388000 audit: PATH item=1 name=(null) inode=11026 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:01:22.388000 audit: PATH item=2 name=(null) inode=11025 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:01:22.388000 audit: PATH item=3 name=(null) inode=11027 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:01:22.388000 audit: PATH item=4 name=(null) inode=11025 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:01:22.388000 audit: PATH item=5 name=(null) inode=11028 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:01:22.388000 audit: PATH item=6 name=(null) inode=11025 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:01:22.388000 audit: PATH item=7 name=(null) inode=11029 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:01:22.388000 audit: PATH item=8 name=(null) inode=11025 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:01:22.388000 audit: PATH item=9 name=(null) inode=11030 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:01:22.388000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 21:01:22.494479 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 21:01:22.494582 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 21:01:22.494599 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 21:01:23.188362 systemd-networkd[1215]: lo: Link UP Oct 2 21:01:23.188375 systemd-networkd[1215]: lo: Gained carrier Oct 2 21:01:23.188775 systemd-networkd[1215]: Enumeration completed Oct 2 21:01:23.188869 systemd[1]: Started systemd-networkd.service. Oct 2 21:01:23.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:23.195194 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 21:01:23.219232 systemd-networkd[1215]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:01:23.283638 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1201) Oct 2 21:01:23.283719 kernel: mlx5_core e5ed:00:02.0 enP58861s1: Link up Oct 2 21:01:23.315195 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 21:01:23.328629 kernel: hv_netvsc 000d3afb-d41c-000d-3afb-d41c000d3afb eth0: Data path switched to VF: enP58861s1 Oct 2 21:01:23.329233 systemd[1]: Finished systemd-udev-settle.service. Oct 2 21:01:23.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:23.335159 systemd-networkd[1215]: enP58861s1: Link UP Oct 2 21:01:23.335237 systemd-networkd[1215]: eth0: Link UP Oct 2 21:01:23.335241 systemd-networkd[1215]: eth0: Gained carrier Oct 2 21:01:23.335851 systemd[1]: Starting lvm2-activation-early.service... Oct 2 21:01:23.342926 systemd-networkd[1215]: enP58861s1: Gained carrier Oct 2 21:01:23.350785 systemd-networkd[1215]: eth0: DHCPv4 address 10.200.20.18/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:01:23.602675 lvm[1276]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 21:01:23.648491 systemd[1]: Finished lvm2-activation-early.service. Oct 2 21:01:23.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:23.660564 systemd[1]: Reached target cryptsetup.target. Oct 2 21:01:23.673895 systemd[1]: Starting lvm2-activation.service... Oct 2 21:01:23.682431 lvm[1277]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 21:01:23.704704 systemd[1]: Finished lvm2-activation.service. Oct 2 21:01:23.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:23.709964 systemd[1]: Reached target local-fs-pre.target. Oct 2 21:01:23.714880 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 21:01:23.714905 systemd[1]: Reached target local-fs.target. Oct 2 21:01:23.719373 systemd[1]: Reached target machines.target. Oct 2 21:01:23.725253 systemd[1]: Starting ldconfig.service... Oct 2 21:01:23.729529 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 21:01:23.729608 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:01:23.730649 systemd[1]: Starting systemd-boot-update.service... Oct 2 21:01:23.736158 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 21:01:23.749923 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 21:01:23.761021 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 21:01:23.761276 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 21:01:23.768151 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 21:01:23.782659 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1279 (bootctl) Oct 2 21:01:23.783780 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 21:01:24.287232 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 21:01:24.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:24.478778 systemd-networkd[1215]: eth0: Gained IPv6LL Oct 2 21:01:24.486029 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 21:01:24.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:24.666910 systemd-tmpfiles[1282]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 21:01:24.689058 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 21:01:24.690667 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 21:01:24.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:24.737806 systemd-tmpfiles[1282]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 21:01:24.741891 systemd-fsck[1287]: fsck.fat 4.2 (2021-01-31) Oct 2 21:01:24.741891 systemd-fsck[1287]: /dev/sda1: 236 files, 113463/258078 clusters Oct 2 21:01:24.748813 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 21:01:24.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:24.765736 systemd[1]: Mounting boot.mount... Oct 2 21:01:24.786504 systemd[1]: Mounted boot.mount. Oct 2 21:01:24.797010 systemd[1]: Finished systemd-boot-update.service. Oct 2 21:01:24.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:24.851562 systemd-tmpfiles[1282]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 21:01:25.254941 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 21:01:25.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:25.274508 kernel: kauditd_printk_skb: 77 callbacks suppressed Oct 2 21:01:25.274583 kernel: audit: type=1130 audit(1696280485.266:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:25.276173 systemd[1]: Starting audit-rules.service... Oct 2 21:01:25.299011 systemd[1]: Starting clean-ca-certificates.service... Oct 2 21:01:25.305569 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 21:01:25.311000 audit: BPF prog-id=27 op=LOAD Oct 2 21:01:25.312836 systemd[1]: Starting systemd-resolved.service... Oct 2 21:01:25.318614 kernel: audit: type=1334 audit(1696280485.311:160): prog-id=27 op=LOAD Oct 2 21:01:25.324000 audit: BPF prog-id=28 op=LOAD Oct 2 21:01:25.327778 systemd[1]: Starting systemd-timesyncd.service... Oct 2 21:01:25.331617 kernel: audit: type=1334 audit(1696280485.324:161): prog-id=28 op=LOAD Oct 2 21:01:25.338470 systemd[1]: Starting systemd-update-utmp.service... Oct 2 21:01:25.371404 systemd[1]: Finished clean-ca-certificates.service. Oct 2 21:01:25.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:25.379966 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 21:01:25.404621 kernel: audit: type=1130 audit(1696280485.379:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:25.408000 audit[1299]: SYSTEM_BOOT pid=1299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 21:01:25.429837 systemd[1]: Finished systemd-update-utmp.service. Oct 2 21:01:25.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:25.470475 kernel: audit: type=1127 audit(1696280485.408:163): pid=1299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 21:01:25.470628 kernel: audit: type=1130 audit(1696280485.434:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:25.479542 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 21:01:25.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:25.506630 kernel: audit: type=1130 audit(1696280485.486:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:25.517321 systemd[1]: Started systemd-timesyncd.service. Oct 2 21:01:25.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:25.522289 systemd[1]: Reached target time-set.target. Oct 2 21:01:25.551709 kernel: audit: type=1130 audit(1696280485.521:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:25.708700 systemd-resolved[1297]: Positive Trust Anchors: Oct 2 21:01:25.708713 systemd-resolved[1297]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 21:01:25.708739 systemd-resolved[1297]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 21:01:25.732000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 21:01:25.744589 augenrules[1314]: No rules Oct 2 21:01:25.732000 audit[1314]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd016c720 a2=420 a3=0 items=0 ppid=1293 pid=1314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:01:25.753231 systemd[1]: Finished audit-rules.service. Oct 2 21:01:25.791283 kernel: audit: type=1305 audit(1696280485.732:167): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 21:01:25.795727 kernel: audit: type=1300 audit(1696280485.732:167): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd016c720 a2=420 a3=0 items=0 ppid=1293 pid=1314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:01:25.732000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 21:01:25.796098 systemd-resolved[1297]: Using system hostname 'ci-3510.3.0-a-9c05479676'. Oct 2 21:01:25.798010 systemd[1]: Started systemd-resolved.service. Oct 2 21:01:25.802914 systemd[1]: Reached target network.target. Oct 2 21:01:25.807575 systemd[1]: Reached target network-online.target. Oct 2 21:01:25.812880 systemd[1]: Reached target nss-lookup.target. Oct 2 21:01:31.618974 ldconfig[1278]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 21:01:31.627760 systemd[1]: Finished ldconfig.service. Oct 2 21:01:31.634045 systemd[1]: Starting systemd-update-done.service... Oct 2 21:01:31.670836 systemd[1]: Finished systemd-update-done.service. Oct 2 21:01:31.679463 systemd[1]: Reached target sysinit.target. Oct 2 21:01:31.684279 systemd[1]: Started motdgen.path. Oct 2 21:01:31.688170 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 21:01:31.694816 systemd[1]: Started logrotate.timer. Oct 2 21:01:31.699029 systemd[1]: Started mdadm.timer. Oct 2 21:01:31.702781 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 21:01:31.707834 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 21:01:31.707861 systemd[1]: Reached target paths.target. Oct 2 21:01:31.712227 systemd[1]: Reached target timers.target. Oct 2 21:01:31.717199 systemd[1]: Listening on dbus.socket. Oct 2 21:01:31.722492 systemd[1]: Starting docker.socket... Oct 2 21:01:31.730624 systemd[1]: Listening on sshd.socket. Oct 2 21:01:31.734917 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:01:31.735406 systemd[1]: Listening on docker.socket. Oct 2 21:01:31.740313 systemd[1]: Reached target sockets.target. Oct 2 21:01:31.750490 systemd[1]: Reached target basic.target. Oct 2 21:01:31.760161 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 21:01:31.760210 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 21:01:31.761983 systemd[1]: Starting containerd.service... Oct 2 21:01:31.774576 systemd[1]: Starting dbus.service... Oct 2 21:01:31.781049 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 21:01:31.787191 systemd[1]: Starting extend-filesystems.service... Oct 2 21:01:31.795387 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 21:01:31.796764 systemd[1]: Starting motdgen.service... Oct 2 21:01:31.801516 systemd[1]: Started nvidia.service. Oct 2 21:01:31.806862 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 21:01:31.812648 systemd[1]: Starting prepare-critools.service... Oct 2 21:01:31.817908 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 21:01:31.823545 systemd[1]: Starting sshd-keygen.service... Oct 2 21:01:31.835281 systemd[1]: Starting systemd-logind.service... Oct 2 21:01:31.841165 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:01:31.841260 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 21:01:31.841987 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 21:01:31.843059 systemd[1]: Starting update-engine.service... Oct 2 21:01:31.845216 jq[1324]: false Oct 2 21:01:31.854732 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 21:01:31.873578 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 21:01:31.873825 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 21:01:31.876185 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 21:01:31.878999 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 21:01:31.890491 extend-filesystems[1325]: Found sda Oct 2 21:01:31.895133 extend-filesystems[1325]: Found sda1 Oct 2 21:01:31.895133 extend-filesystems[1325]: Found sda2 Oct 2 21:01:31.895133 extend-filesystems[1325]: Found sda3 Oct 2 21:01:31.895133 extend-filesystems[1325]: Found usr Oct 2 21:01:31.895133 extend-filesystems[1325]: Found sda4 Oct 2 21:01:31.895133 extend-filesystems[1325]: Found sda6 Oct 2 21:01:31.895133 extend-filesystems[1325]: Found sda7 Oct 2 21:01:31.895133 extend-filesystems[1325]: Found sda9 Oct 2 21:01:31.895133 extend-filesystems[1325]: Checking size of /dev/sda9 Oct 2 21:01:31.922449 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 21:01:32.009136 jq[1342]: true Oct 2 21:01:31.922639 systemd[1]: Finished motdgen.service. Oct 2 21:01:32.009438 jq[1353]: true Oct 2 21:01:32.012611 tar[1345]: ./ Oct 2 21:01:32.012611 tar[1345]: ./macvlan Oct 2 21:01:32.015784 tar[1346]: crictl Oct 2 21:01:32.021742 systemd-logind[1337]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 21:01:32.027735 systemd-logind[1337]: New seat seat0. Oct 2 21:01:32.105091 env[1352]: time="2023-10-02T21:01:32.103663800Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 21:01:32.107858 tar[1345]: ./static Oct 2 21:01:32.107628 systemd[1]: Started dbus.service. Oct 2 21:01:32.107454 dbus-daemon[1323]: [system] SELinux support is enabled Oct 2 21:01:32.113348 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 21:01:32.113377 systemd[1]: Reached target system-config.target. Oct 2 21:01:32.114119 dbus-daemon[1323]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 21:01:32.121694 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 21:01:32.121718 systemd[1]: Reached target user-config.target. Oct 2 21:01:32.129091 systemd[1]: Started systemd-logind.service. Oct 2 21:01:32.163896 bash[1386]: Updated "/home/core/.ssh/authorized_keys" Oct 2 21:01:32.165309 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 21:01:32.186079 tar[1345]: ./vlan Oct 2 21:01:32.207720 env[1352]: time="2023-10-02T21:01:32.207618400Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 21:01:32.207867 env[1352]: time="2023-10-02T21:01:32.207833240Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:01:32.208603 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 21:01:32.215683 env[1352]: time="2023-10-02T21:01:32.215639360Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:01:32.215683 env[1352]: time="2023-10-02T21:01:32.215680520Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:01:32.216024 env[1352]: time="2023-10-02T21:01:32.215984520Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:01:32.216120 env[1352]: time="2023-10-02T21:01:32.216041880Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 21:01:32.216120 env[1352]: time="2023-10-02T21:01:32.216057800Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 21:01:32.216120 env[1352]: time="2023-10-02T21:01:32.216067360Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 21:01:32.218370 env[1352]: time="2023-10-02T21:01:32.218328920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:01:32.219243 env[1352]: time="2023-10-02T21:01:32.218703080Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:01:32.219243 env[1352]: time="2023-10-02T21:01:32.218843080Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:01:32.219243 env[1352]: time="2023-10-02T21:01:32.218858840Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 21:01:32.219243 env[1352]: time="2023-10-02T21:01:32.218919120Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 21:01:32.219243 env[1352]: time="2023-10-02T21:01:32.218931920Z" level=info msg="metadata content store policy set" policy=shared Oct 2 21:01:32.221713 extend-filesystems[1325]: Old size kept for /dev/sda9 Oct 2 21:01:32.228032 extend-filesystems[1325]: Found sr0 Oct 2 21:01:32.223248 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 21:01:32.287539 tar[1345]: ./portmap Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241007960Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241088920Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241105120Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241165680Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241182240Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241197800Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241211840Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241642640Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241664280Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241678160Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241690040Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241703080Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241892200Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 21:01:32.287645 env[1352]: time="2023-10-02T21:01:32.241971600Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 21:01:32.223399 systemd[1]: Finished extend-filesystems.service. Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.242469880Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.242497440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.242512360Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.242861440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.242883200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.242896040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.242907080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.242919560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.242932560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.242955040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.242967520Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.242982800Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.243124960Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.243141040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.288054 env[1352]: time="2023-10-02T21:01:32.243153800Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.266228 systemd[1]: Started containerd.service. Oct 2 21:01:32.288464 env[1352]: time="2023-10-02T21:01:32.243165480Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 21:01:32.288464 env[1352]: time="2023-10-02T21:01:32.243184840Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 21:01:32.288464 env[1352]: time="2023-10-02T21:01:32.243197880Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 21:01:32.288464 env[1352]: time="2023-10-02T21:01:32.243218040Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 21:01:32.288464 env[1352]: time="2023-10-02T21:01:32.243251440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.243523920Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.243579080Z" level=info msg="Connect containerd service" Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.243824040Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.244515880Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.245183440Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.245224840Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.245269680Z" level=info msg="containerd successfully booted in 0.145088s" Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.246546680Z" level=info msg="Start subscribing containerd event" Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.246625080Z" level=info msg="Start recovering state" Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.246703920Z" level=info msg="Start event monitor" Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.247205280Z" level=info msg="Start snapshots syncer" Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.247225960Z" level=info msg="Start cni network conf syncer for default" Oct 2 21:01:32.288582 env[1352]: time="2023-10-02T21:01:32.247234280Z" level=info msg="Start streaming server" Oct 2 21:01:32.312206 tar[1345]: ./host-local Oct 2 21:01:32.359483 tar[1345]: ./vrf Oct 2 21:01:32.411087 tar[1345]: ./bridge Oct 2 21:01:32.466740 tar[1345]: ./tuning Oct 2 21:01:32.513066 tar[1345]: ./firewall Oct 2 21:01:32.564987 update_engine[1340]: I1002 21:01:32.551151 1340 main.cc:92] Flatcar Update Engine starting Oct 2 21:01:32.586206 tar[1345]: ./host-device Oct 2 21:01:32.612367 systemd[1]: Started update-engine.service. Oct 2 21:01:32.612654 update_engine[1340]: I1002 21:01:32.612404 1340 update_check_scheduler.cc:74] Next update check in 2m12s Oct 2 21:01:32.620566 systemd[1]: Started locksmithd.service. Oct 2 21:01:32.639942 tar[1345]: ./sbr Oct 2 21:01:32.672890 tar[1345]: ./loopback Oct 2 21:01:32.704099 tar[1345]: ./dhcp Oct 2 21:01:32.793435 tar[1345]: ./ptp Oct 2 21:01:32.829984 tar[1345]: ./ipvlan Oct 2 21:01:32.868084 tar[1345]: ./bandwidth Oct 2 21:01:32.929068 systemd[1]: Finished prepare-critools.service. Oct 2 21:01:32.972523 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 21:01:34.178368 locksmithd[1429]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 21:01:36.323517 sshd_keygen[1343]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 21:01:36.374472 systemd[1]: Finished sshd-keygen.service. Oct 2 21:01:36.382244 systemd[1]: Starting issuegen.service... Oct 2 21:01:36.389798 systemd[1]: Started waagent.service. Oct 2 21:01:36.394641 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 21:01:36.394797 systemd[1]: Finished issuegen.service. Oct 2 21:01:36.400652 systemd[1]: Starting systemd-user-sessions.service... Oct 2 21:01:36.627280 systemd[1]: Finished systemd-user-sessions.service. Oct 2 21:01:36.634186 systemd[1]: Started getty@tty1.service. Oct 2 21:01:36.639891 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 21:01:36.651395 systemd[1]: Reached target getty.target. Oct 2 21:01:36.661240 systemd[1]: Reached target multi-user.target. Oct 2 21:01:36.673338 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 21:01:36.686312 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 21:01:36.686465 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 21:01:36.692193 systemd[1]: Startup finished in 832ms (kernel) + 19.810s (initrd) + 25.777s (userspace) = 46.420s. Oct 2 21:01:40.559068 login[1450]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 21:01:40.560205 login[1451]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 21:01:40.724585 systemd[1]: Created slice user-500.slice. Oct 2 21:01:40.725961 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 21:01:40.728450 systemd-logind[1337]: New session 1 of user core. Oct 2 21:01:40.731243 systemd-logind[1337]: New session 2 of user core. Oct 2 21:01:40.987492 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 21:01:40.988975 systemd[1]: Starting user@500.service... Oct 2 21:01:41.268832 (systemd)[1455]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:01:41.873646 systemd[1455]: Queued start job for default target default.target. Oct 2 21:01:41.874149 systemd[1455]: Reached target paths.target. Oct 2 21:01:41.874169 systemd[1455]: Reached target sockets.target. Oct 2 21:01:41.874180 systemd[1455]: Reached target timers.target. Oct 2 21:01:41.874190 systemd[1455]: Reached target basic.target. Oct 2 21:01:41.874289 systemd[1]: Started user@500.service. Oct 2 21:01:41.875120 systemd[1455]: Reached target default.target. Oct 2 21:01:41.875165 systemd[1]: Started session-1.scope. Oct 2 21:01:41.875171 systemd[1455]: Startup finished in 588ms. Oct 2 21:01:41.875712 systemd[1]: Started session-2.scope. Oct 2 21:01:47.991475 waagent[1445]: 2023-10-02T21:01:47.991371Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 21:01:48.011454 waagent[1445]: 2023-10-02T21:01:48.011365Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 21:01:48.016349 waagent[1445]: 2023-10-02T21:01:48.016289Z INFO Daemon Daemon Python: 3.9.16 Oct 2 21:01:48.021481 waagent[1445]: 2023-10-02T21:01:48.021401Z INFO Daemon Daemon Run daemon Oct 2 21:01:48.026204 waagent[1445]: 2023-10-02T21:01:48.026147Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 21:01:48.049830 waagent[1445]: 2023-10-02T21:01:48.049163Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 21:01:48.085541 waagent[1445]: 2023-10-02T21:01:48.085351Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 21:01:48.096171 waagent[1445]: 2023-10-02T21:01:48.096084Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 21:01:48.101778 waagent[1445]: 2023-10-02T21:01:48.101703Z INFO Daemon Daemon Using waagent for provisioning Oct 2 21:01:48.108050 waagent[1445]: 2023-10-02T21:01:48.107985Z INFO Daemon Daemon Activate resource disk Oct 2 21:01:48.113512 waagent[1445]: 2023-10-02T21:01:48.113440Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 21:01:48.128518 waagent[1445]: 2023-10-02T21:01:48.128446Z INFO Daemon Daemon Found device: None Oct 2 21:01:48.133462 waagent[1445]: 2023-10-02T21:01:48.133393Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 21:01:48.143829 waagent[1445]: 2023-10-02T21:01:48.143737Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 21:01:48.166842 waagent[1445]: 2023-10-02T21:01:48.166763Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 21:01:48.179143 waagent[1445]: 2023-10-02T21:01:48.179059Z INFO Daemon Daemon Running default provisioning handler Oct 2 21:01:48.195854 waagent[1445]: 2023-10-02T21:01:48.195724Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 21:01:48.212080 waagent[1445]: 2023-10-02T21:01:48.211919Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 21:01:48.222810 waagent[1445]: 2023-10-02T21:01:48.222732Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 21:01:48.228531 waagent[1445]: 2023-10-02T21:01:48.228466Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 21:01:48.257164 waagent[1445]: 2023-10-02T21:01:48.256941Z INFO Daemon Daemon Successfully mounted dvd Oct 2 21:01:48.373201 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 21:01:48.420473 waagent[1445]: 2023-10-02T21:01:48.420332Z INFO Daemon Daemon Detect protocol endpoint Oct 2 21:01:48.426044 waagent[1445]: 2023-10-02T21:01:48.425960Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 21:01:48.432849 waagent[1445]: 2023-10-02T21:01:48.432784Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 21:01:48.440050 waagent[1445]: 2023-10-02T21:01:48.439982Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 21:01:48.453143 waagent[1445]: 2023-10-02T21:01:48.453045Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 21:01:48.466837 waagent[1445]: 2023-10-02T21:01:48.466738Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 21:01:48.606842 waagent[1445]: 2023-10-02T21:01:48.606769Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 21:01:48.614422 waagent[1445]: 2023-10-02T21:01:48.614376Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 21:01:48.620418 waagent[1445]: 2023-10-02T21:01:48.620360Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 21:01:50.173847 waagent[1445]: 2023-10-02T21:01:50.173412Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 21:01:50.193578 waagent[1445]: 2023-10-02T21:01:50.193501Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 21:01:50.200932 waagent[1445]: 2023-10-02T21:01:50.200854Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 21:01:50.308672 waagent[1445]: 2023-10-02T21:01:50.308493Z INFO Daemon Daemon Found private key matching thumbprint C28CEA5E82A2B33A60FC709EF7500FD0C6F6130A Oct 2 21:01:50.318845 waagent[1445]: 2023-10-02T21:01:50.318762Z INFO Daemon Daemon Certificate with thumbprint C79892AC15349702CDE11C2F29C75F9480325B4C has no matching private key. Oct 2 21:01:50.329306 waagent[1445]: 2023-10-02T21:01:50.329232Z INFO Daemon Daemon Fetch goal state completed Oct 2 21:01:50.387528 waagent[1445]: 2023-10-02T21:01:50.387467Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: fcdf1bbe-7ed7-4aa6-8a2c-3f76fd178998 New eTag: 4571522405886521353] Oct 2 21:01:50.399362 waagent[1445]: 2023-10-02T21:01:50.399275Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 21:01:50.416212 waagent[1445]: 2023-10-02T21:01:50.416150Z INFO Daemon Daemon Starting provisioning Oct 2 21:01:50.422229 waagent[1445]: 2023-10-02T21:01:50.422149Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 21:01:50.427451 waagent[1445]: 2023-10-02T21:01:50.427357Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-9c05479676] Oct 2 21:01:50.598396 waagent[1445]: 2023-10-02T21:01:50.598260Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-9c05479676] Oct 2 21:01:50.605740 waagent[1445]: 2023-10-02T21:01:50.605662Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 21:01:50.612692 waagent[1445]: 2023-10-02T21:01:50.612632Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 21:01:50.632343 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 21:01:50.632515 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 21:01:50.632573 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 21:01:50.632830 systemd[1]: Stopping systemd-networkd.service... Oct 2 21:01:50.636642 systemd-networkd[1215]: eth0: DHCPv6 lease lost Oct 2 21:01:50.636968 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 21:01:50.640352 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 21:01:50.640553 systemd[1]: Stopped systemd-networkd.service. Oct 2 21:01:50.643112 systemd[1]: Starting systemd-networkd.service... Oct 2 21:01:50.688835 systemd-networkd[1498]: enP58861s1: Link UP Oct 2 21:01:50.688845 systemd-networkd[1498]: enP58861s1: Gained carrier Oct 2 21:01:50.689920 systemd-networkd[1498]: eth0: Link UP Oct 2 21:01:50.689930 systemd-networkd[1498]: eth0: Gained carrier Oct 2 21:01:50.690232 systemd-networkd[1498]: lo: Link UP Oct 2 21:01:50.690243 systemd-networkd[1498]: lo: Gained carrier Oct 2 21:01:50.690469 systemd-networkd[1498]: eth0: Gained IPv6LL Oct 2 21:01:50.690692 systemd-networkd[1498]: Enumeration completed Oct 2 21:01:50.691509 systemd-networkd[1498]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:01:50.691571 systemd[1]: Started systemd-networkd.service. Oct 2 21:01:50.693136 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 21:01:50.693359 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 21:01:50.696007 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 21:01:50.696877 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 21:01:50.704117 waagent[1445]: 2023-10-02T21:01:50.698906Z INFO Daemon Daemon Create user account if not exists Oct 2 21:01:50.705424 waagent[1445]: 2023-10-02T21:01:50.705349Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 21:01:50.711759 waagent[1445]: 2023-10-02T21:01:50.711686Z INFO Daemon Daemon Configure sudoer Oct 2 21:01:50.716692 systemd-networkd[1498]: eth0: DHCPv4 address 10.200.20.18/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:01:50.717502 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 21:01:50.718282 waagent[1445]: 2023-10-02T21:01:50.717770Z INFO Daemon Daemon Configure sshd Oct 2 21:01:50.722320 waagent[1445]: 2023-10-02T21:01:50.722253Z INFO Daemon Daemon Deploy ssh public key. Oct 2 21:01:50.724270 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 21:01:50.808823 waagent[1445]: 2023-10-02T21:01:50.808692Z INFO Daemon Daemon Decode custom data Oct 2 21:01:50.813854 waagent[1445]: 2023-10-02T21:01:50.813784Z INFO Daemon Daemon Save custom data Oct 2 21:01:52.042550 waagent[1445]: 2023-10-02T21:01:52.042453Z INFO Daemon Daemon Provisioning complete Oct 2 21:01:52.062488 waagent[1445]: 2023-10-02T21:01:52.062423Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 21:01:52.069327 waagent[1445]: 2023-10-02T21:01:52.069247Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 21:01:52.080941 waagent[1445]: 2023-10-02T21:01:52.080866Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 21:01:52.392063 waagent[1507]: 2023-10-02T21:01:52.391919Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 21:01:52.393134 waagent[1507]: 2023-10-02T21:01:52.393080Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:01:52.393355 waagent[1507]: 2023-10-02T21:01:52.393309Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:01:52.405708 waagent[1507]: 2023-10-02T21:01:52.405640Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 21:01:52.405990 waagent[1507]: 2023-10-02T21:01:52.405941Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 21:01:52.486301 waagent[1507]: 2023-10-02T21:01:52.486169Z INFO ExtHandler ExtHandler Found private key matching thumbprint C28CEA5E82A2B33A60FC709EF7500FD0C6F6130A Oct 2 21:01:52.486705 waagent[1507]: 2023-10-02T21:01:52.486651Z INFO ExtHandler ExtHandler Certificate with thumbprint C79892AC15349702CDE11C2F29C75F9480325B4C has no matching private key. Oct 2 21:01:52.487034 waagent[1507]: 2023-10-02T21:01:52.486985Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 21:01:52.500572 waagent[1507]: 2023-10-02T21:01:52.500520Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 46a2473a-aa01-40e7-9ec8-65afde120c5f New eTag: 4571522405886521353] Oct 2 21:01:52.501371 waagent[1507]: 2023-10-02T21:01:52.501314Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 21:01:52.614289 waagent[1507]: 2023-10-02T21:01:52.614153Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 21:01:52.624711 waagent[1507]: 2023-10-02T21:01:52.624631Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1507 Oct 2 21:01:52.628670 waagent[1507]: 2023-10-02T21:01:52.628587Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 21:01:52.630181 waagent[1507]: 2023-10-02T21:01:52.630124Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 21:01:52.723560 waagent[1507]: 2023-10-02T21:01:52.723448Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 21:01:52.724123 waagent[1507]: 2023-10-02T21:01:52.724068Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 21:01:52.734523 waagent[1507]: 2023-10-02T21:01:52.734470Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 21:01:52.735219 waagent[1507]: 2023-10-02T21:01:52.735163Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 21:01:52.736498 waagent[1507]: 2023-10-02T21:01:52.736438Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 21:01:52.737968 waagent[1507]: 2023-10-02T21:01:52.737898Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 21:01:52.738253 waagent[1507]: 2023-10-02T21:01:52.738184Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:01:52.738799 waagent[1507]: 2023-10-02T21:01:52.738731Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:01:52.739411 waagent[1507]: 2023-10-02T21:01:52.739345Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 21:01:52.739748 waagent[1507]: 2023-10-02T21:01:52.739688Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 21:01:52.739748 waagent[1507]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 21:01:52.739748 waagent[1507]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 21:01:52.739748 waagent[1507]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 21:01:52.739748 waagent[1507]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:01:52.739748 waagent[1507]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:01:52.739748 waagent[1507]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:01:52.744024 waagent[1507]: 2023-10-02T21:01:52.743943Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 21:01:52.744941 waagent[1507]: 2023-10-02T21:01:52.743684Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:01:52.745119 waagent[1507]: 2023-10-02T21:01:52.745036Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 21:01:52.745547 waagent[1507]: 2023-10-02T21:01:52.745477Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 21:01:52.746396 waagent[1507]: 2023-10-02T21:01:52.746296Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 21:01:52.746814 waagent[1507]: 2023-10-02T21:01:52.746747Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:01:52.747114 waagent[1507]: 2023-10-02T21:01:52.747043Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 21:01:52.747327 waagent[1507]: 2023-10-02T21:01:52.747246Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 21:01:52.748623 waagent[1507]: 2023-10-02T21:01:52.748512Z INFO EnvHandler ExtHandler Configure routes Oct 2 21:01:52.752829 waagent[1507]: 2023-10-02T21:01:52.752729Z INFO EnvHandler ExtHandler Gateway:None Oct 2 21:01:52.752967 waagent[1507]: 2023-10-02T21:01:52.752916Z INFO EnvHandler ExtHandler Routes:None Oct 2 21:01:52.763904 waagent[1507]: 2023-10-02T21:01:52.763811Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 21:01:52.766035 waagent[1507]: 2023-10-02T21:01:52.765968Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 21:01:52.769308 waagent[1507]: 2023-10-02T21:01:52.769247Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 21:01:52.790895 waagent[1507]: 2023-10-02T21:01:52.790800Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1498' Oct 2 21:01:52.812509 waagent[1507]: 2023-10-02T21:01:52.812445Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 21:01:52.869873 waagent[1507]: 2023-10-02T21:01:52.869350Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 21:01:52.869873 waagent[1507]: Executing ['ip', '-a', '-o', 'link']: Oct 2 21:01:52.869873 waagent[1507]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 21:01:52.869873 waagent[1507]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:fb:d4:1c brd ff:ff:ff:ff:ff:ff Oct 2 21:01:52.869873 waagent[1507]: 3: enP58861s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:fb:d4:1c brd ff:ff:ff:ff:ff:ff\ altname enP58861p0s2 Oct 2 21:01:52.869873 waagent[1507]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 21:01:52.869873 waagent[1507]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 21:01:52.869873 waagent[1507]: 2: eth0 inet 10.200.20.18/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 21:01:52.869873 waagent[1507]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 21:01:52.869873 waagent[1507]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 21:01:52.869873 waagent[1507]: 2: eth0 inet6 fe80::20d:3aff:fefb:d41c/64 scope link \ valid_lft forever preferred_lft forever Oct 2 21:01:52.998225 waagent[1507]: 2023-10-02T21:01:52.998117Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.9.1.1 -- exiting Oct 2 21:01:53.083918 waagent[1445]: 2023-10-02T21:01:53.083799Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 21:01:53.087679 waagent[1445]: 2023-10-02T21:01:53.087586Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.9.1.1 to be the latest agent Oct 2 21:01:54.260650 waagent[1536]: 2023-10-02T21:01:54.260535Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.9.1.1) Oct 2 21:01:54.261719 waagent[1536]: 2023-10-02T21:01:54.261659Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 21:01:54.261949 waagent[1536]: 2023-10-02T21:01:54.261902Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 21:01:54.271370 waagent[1536]: 2023-10-02T21:01:54.271268Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 21:01:54.271933 waagent[1536]: 2023-10-02T21:01:54.271878Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:01:54.272186 waagent[1536]: 2023-10-02T21:01:54.272138Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:01:54.285513 waagent[1536]: 2023-10-02T21:01:54.285427Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 21:01:54.294704 waagent[1536]: 2023-10-02T21:01:54.294642Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 21:01:54.295966 waagent[1536]: 2023-10-02T21:01:54.295907Z INFO ExtHandler Oct 2 21:01:54.296223 waagent[1536]: 2023-10-02T21:01:54.296175Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: afd65578-1ae1-4c8a-99e1-a24d5433cae5 eTag: 4571522405886521353 source: Fabric] Oct 2 21:01:54.297095 waagent[1536]: 2023-10-02T21:01:54.297039Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 21:01:54.298431 waagent[1536]: 2023-10-02T21:01:54.298374Z INFO ExtHandler Oct 2 21:01:54.298668 waagent[1536]: 2023-10-02T21:01:54.298618Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 21:01:54.305318 waagent[1536]: 2023-10-02T21:01:54.305267Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 21:01:54.305980 waagent[1536]: 2023-10-02T21:01:54.305935Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 21:01:54.325584 waagent[1536]: 2023-10-02T21:01:54.325523Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 21:01:54.423912 waagent[1536]: 2023-10-02T21:01:54.423776Z INFO ExtHandler Downloaded certificate {'thumbprint': 'C79892AC15349702CDE11C2F29C75F9480325B4C', 'hasPrivateKey': False} Oct 2 21:01:54.425189 waagent[1536]: 2023-10-02T21:01:54.425129Z INFO ExtHandler Downloaded certificate {'thumbprint': 'C28CEA5E82A2B33A60FC709EF7500FD0C6F6130A', 'hasPrivateKey': True} Oct 2 21:01:54.426375 waagent[1536]: 2023-10-02T21:01:54.426315Z INFO ExtHandler Fetch goal state completed Oct 2 21:01:54.451188 waagent[1536]: 2023-10-02T21:01:54.451093Z INFO ExtHandler ExtHandler WALinuxAgent-2.9.1.1 running as process 1536 Oct 2 21:01:54.455212 waagent[1536]: 2023-10-02T21:01:54.455121Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 21:01:54.457042 waagent[1536]: 2023-10-02T21:01:54.456958Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 21:01:54.463689 waagent[1536]: 2023-10-02T21:01:54.463629Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 21:01:54.464300 waagent[1536]: 2023-10-02T21:01:54.464245Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 21:01:54.474759 waagent[1536]: 2023-10-02T21:01:54.474700Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 21:01:54.475443 waagent[1536]: 2023-10-02T21:01:54.475390Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 21:01:54.482985 waagent[1536]: 2023-10-02T21:01:54.482886Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Oct 2 21:01:54.486899 waagent[1536]: 2023-10-02T21:01:54.486841Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 21:01:54.488786 waagent[1536]: 2023-10-02T21:01:54.488718Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 21:01:54.489169 waagent[1536]: 2023-10-02T21:01:54.489095Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:01:54.489951 waagent[1536]: 2023-10-02T21:01:54.489875Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 21:01:54.490147 waagent[1536]: 2023-10-02T21:01:54.490076Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:01:54.490867 waagent[1536]: 2023-10-02T21:01:54.490794Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 21:01:54.491801 waagent[1536]: 2023-10-02T21:01:54.491728Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 21:01:54.491801 waagent[1536]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 21:01:54.491801 waagent[1536]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 21:01:54.491801 waagent[1536]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 21:01:54.491801 waagent[1536]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:01:54.491801 waagent[1536]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:01:54.491801 waagent[1536]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:01:54.494156 waagent[1536]: 2023-10-02T21:01:54.494077Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:01:54.494289 waagent[1536]: 2023-10-02T21:01:54.493534Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 21:01:54.494863 waagent[1536]: 2023-10-02T21:01:54.494812Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:01:54.495463 waagent[1536]: 2023-10-02T21:01:54.495401Z INFO EnvHandler ExtHandler Configure routes Oct 2 21:01:54.495748 waagent[1536]: 2023-10-02T21:01:54.494561Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 21:01:54.495833 waagent[1536]: 2023-10-02T21:01:54.495695Z INFO EnvHandler ExtHandler Gateway:None Oct 2 21:01:54.499228 waagent[1536]: 2023-10-02T21:01:54.499099Z INFO EnvHandler ExtHandler Routes:None Oct 2 21:01:54.499565 waagent[1536]: 2023-10-02T21:01:54.499490Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 21:01:54.499858 waagent[1536]: 2023-10-02T21:01:54.499795Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 21:01:54.504463 waagent[1536]: 2023-10-02T21:01:54.504173Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 21:01:54.525216 waagent[1536]: 2023-10-02T21:01:54.525142Z INFO ExtHandler ExtHandler No requested version specified, checking for all versions for agent update (family: Prod) Oct 2 21:01:54.526273 waagent[1536]: 2023-10-02T21:01:54.526216Z INFO ExtHandler ExtHandler Downloading manifest Oct 2 21:01:54.532236 waagent[1536]: 2023-10-02T21:01:54.532145Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 21:01:54.532236 waagent[1536]: Executing ['ip', '-a', '-o', 'link']: Oct 2 21:01:54.532236 waagent[1536]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 21:01:54.532236 waagent[1536]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:fb:d4:1c brd ff:ff:ff:ff:ff:ff Oct 2 21:01:54.532236 waagent[1536]: 3: enP58861s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:fb:d4:1c brd ff:ff:ff:ff:ff:ff\ altname enP58861p0s2 Oct 2 21:01:54.532236 waagent[1536]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 21:01:54.532236 waagent[1536]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 21:01:54.532236 waagent[1536]: 2: eth0 inet 10.200.20.18/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 21:01:54.532236 waagent[1536]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 21:01:54.532236 waagent[1536]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 21:01:54.532236 waagent[1536]: 2: eth0 inet6 fe80::20d:3aff:fefb:d41c/64 scope link \ valid_lft forever preferred_lft forever Oct 2 21:01:54.556081 waagent[1536]: 2023-10-02T21:01:54.556006Z INFO ExtHandler ExtHandler Oct 2 21:01:54.557753 waagent[1536]: 2023-10-02T21:01:54.557661Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 72301581-6303-4552-8939-0064016b061d correlation 0b37378d-b34d-449b-b3df-6fdeea658395 created: 2023-10-02T21:00:08.403572Z] Oct 2 21:01:54.559349 waagent[1536]: 2023-10-02T21:01:54.559263Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 21:01:54.561737 waagent[1536]: 2023-10-02T21:01:54.561662Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 5 ms] Oct 2 21:01:54.589185 waagent[1536]: 2023-10-02T21:01:54.589097Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 21:01:54.623571 waagent[1536]: 2023-10-02T21:01:54.623497Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.9.1.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 7D03B75A-CB74-4B2D-8201-051DA52F6A11;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 21:01:54.806633 waagent[1536]: 2023-10-02T21:01:54.806423Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules. Current Firewall rules: Oct 2 21:01:54.806633 waagent[1536]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:01:54.806633 waagent[1536]: pkts bytes target prot opt in out source destination Oct 2 21:01:54.806633 waagent[1536]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:01:54.806633 waagent[1536]: pkts bytes target prot opt in out source destination Oct 2 21:01:54.806633 waagent[1536]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:01:54.806633 waagent[1536]: pkts bytes target prot opt in out source destination Oct 2 21:01:54.806633 waagent[1536]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 21:01:54.806633 waagent[1536]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 21:01:54.806633 waagent[1536]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 21:01:54.817945 waagent[1536]: 2023-10-02T21:01:54.817810Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 21:01:54.817945 waagent[1536]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:01:54.817945 waagent[1536]: pkts bytes target prot opt in out source destination Oct 2 21:01:54.817945 waagent[1536]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:01:54.817945 waagent[1536]: pkts bytes target prot opt in out source destination Oct 2 21:01:54.817945 waagent[1536]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:01:54.817945 waagent[1536]: pkts bytes target prot opt in out source destination Oct 2 21:01:54.817945 waagent[1536]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 21:01:54.817945 waagent[1536]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 21:01:54.817945 waagent[1536]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 21:01:54.818870 waagent[1536]: 2023-10-02T21:01:54.818820Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 21:02:10.996526 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Oct 2 21:02:15.285897 systemd[1]: Created slice system-sshd.slice. Oct 2 21:02:15.287272 systemd[1]: Started sshd@0-10.200.20.18:22-10.200.12.6:45886.service. Oct 2 21:02:15.910879 sshd[1586]: Accepted publickey for core from 10.200.12.6 port 45886 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:15.934300 sshd[1586]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:15.938163 systemd-logind[1337]: New session 3 of user core. Oct 2 21:02:15.938995 systemd[1]: Started session-3.scope. Oct 2 21:02:16.285080 systemd[1]: Started sshd@1-10.200.20.18:22-10.200.12.6:45902.service. Oct 2 21:02:16.702487 sshd[1591]: Accepted publickey for core from 10.200.12.6 port 45902 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:16.704218 sshd[1591]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:16.708247 systemd-logind[1337]: New session 4 of user core. Oct 2 21:02:16.708690 systemd[1]: Started session-4.scope. Oct 2 21:02:17.017971 sshd[1591]: pam_unix(sshd:session): session closed for user core Oct 2 21:02:17.020621 systemd-logind[1337]: Session 4 logged out. Waiting for processes to exit. Oct 2 21:02:17.020692 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 21:02:17.021831 systemd[1]: sshd@1-10.200.20.18:22-10.200.12.6:45902.service: Deactivated successfully. Oct 2 21:02:17.022542 systemd-logind[1337]: Removed session 4. Oct 2 21:02:17.088384 systemd[1]: Started sshd@2-10.200.20.18:22-10.200.12.6:45914.service. Oct 2 21:02:17.507080 sshd[1597]: Accepted publickey for core from 10.200.12.6 port 45914 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:17.508962 sshd[1597]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:17.512690 systemd-logind[1337]: New session 5 of user core. Oct 2 21:02:17.513143 systemd[1]: Started session-5.scope. Oct 2 21:02:17.814552 sshd[1597]: pam_unix(sshd:session): session closed for user core Oct 2 21:02:17.817268 systemd[1]: sshd@2-10.200.20.18:22-10.200.12.6:45914.service: Deactivated successfully. Oct 2 21:02:17.817915 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 21:02:17.818855 systemd-logind[1337]: Session 5 logged out. Waiting for processes to exit. Oct 2 21:02:17.819536 systemd-logind[1337]: Removed session 5. Oct 2 21:02:17.886336 systemd[1]: Started sshd@3-10.200.20.18:22-10.200.12.6:50290.service. Oct 2 21:02:18.272620 update_engine[1340]: I1002 21:02:18.272572 1340 update_attempter.cc:505] Updating boot flags... Oct 2 21:02:18.298900 sshd[1603]: Accepted publickey for core from 10.200.12.6 port 50290 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:18.300816 sshd[1603]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:18.309053 systemd[1]: Started session-6.scope. Oct 2 21:02:18.309637 systemd-logind[1337]: New session 6 of user core. Oct 2 21:02:18.609337 sshd[1603]: pam_unix(sshd:session): session closed for user core Oct 2 21:02:18.612518 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 21:02:18.613104 systemd-logind[1337]: Session 6 logged out. Waiting for processes to exit. Oct 2 21:02:18.613231 systemd[1]: sshd@3-10.200.20.18:22-10.200.12.6:50290.service: Deactivated successfully. Oct 2 21:02:18.614148 systemd-logind[1337]: Removed session 6. Oct 2 21:02:18.684125 systemd[1]: Started sshd@4-10.200.20.18:22-10.200.12.6:50300.service. Oct 2 21:02:19.132169 sshd[1675]: Accepted publickey for core from 10.200.12.6 port 50300 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:19.133698 sshd[1675]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:19.137688 systemd-logind[1337]: New session 7 of user core. Oct 2 21:02:19.138113 systemd[1]: Started session-7.scope. Oct 2 21:02:19.618383 sudo[1678]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 21:02:19.618928 sudo[1678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:02:19.655833 dbus-daemon[1323]: avc: received setenforce notice (enforcing=1) Oct 2 21:02:19.658023 sudo[1678]: pam_unix(sudo:session): session closed for user root Oct 2 21:02:19.744249 sshd[1675]: pam_unix(sshd:session): session closed for user core Oct 2 21:02:19.750575 systemd[1]: sshd@4-10.200.20.18:22-10.200.12.6:50300.service: Deactivated successfully. Oct 2 21:02:19.750806 systemd-logind[1337]: Session 7 logged out. Waiting for processes to exit. Oct 2 21:02:19.751442 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 21:02:19.752261 systemd-logind[1337]: Removed session 7. Oct 2 21:02:19.813437 systemd[1]: Started sshd@5-10.200.20.18:22-10.200.12.6:50310.service. Oct 2 21:02:20.226691 sshd[1682]: Accepted publickey for core from 10.200.12.6 port 50310 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:20.228303 sshd[1682]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:20.232202 systemd-logind[1337]: New session 8 of user core. Oct 2 21:02:20.232647 systemd[1]: Started session-8.scope. Oct 2 21:02:20.481274 sudo[1686]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 21:02:20.481801 sudo[1686]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:02:20.485325 sudo[1686]: pam_unix(sudo:session): session closed for user root Oct 2 21:02:20.491452 sudo[1685]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 21:02:20.491933 sudo[1685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:02:20.503201 systemd[1]: Stopping audit-rules.service... Oct 2 21:02:20.504000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 21:02:20.507766 auditctl[1689]: No rules Oct 2 21:02:20.509609 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:02:20.509675 kernel: audit: type=1305 audit(1696280540.504:168): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 21:02:20.509955 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 21:02:20.510124 systemd[1]: Stopped audit-rules.service. Oct 2 21:02:20.511622 systemd[1]: Starting audit-rules.service... Oct 2 21:02:20.504000 audit[1689]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffd8fed90 a2=420 a3=0 items=0 ppid=1 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:20.556784 kernel: audit: type=1300 audit(1696280540.504:168): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffd8fed90 a2=420 a3=0 items=0 ppid=1 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:20.504000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 21:02:20.574437 kernel: audit: type=1327 audit(1696280540.504:168): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 21:02:20.574647 kernel: audit: type=1131 audit(1696280540.509:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:20.509000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:20.592724 augenrules[1706]: No rules Oct 2 21:02:20.594113 systemd[1]: Finished audit-rules.service. Oct 2 21:02:20.598344 sudo[1685]: pam_unix(sudo:session): session closed for user root Oct 2 21:02:20.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:20.616587 kernel: audit: type=1130 audit(1696280540.593:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:20.616708 kernel: audit: type=1106 audit(1696280540.597:171): pid=1685 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:20.597000 audit[1685]: USER_END pid=1685 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:20.597000 audit[1685]: CRED_DISP pid=1685 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:20.667871 kernel: audit: type=1104 audit(1696280540.597:172): pid=1685 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:20.669276 sshd[1682]: pam_unix(sshd:session): session closed for user core Oct 2 21:02:20.669000 audit[1682]: USER_END pid=1682 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:20.676887 systemd-logind[1337]: Session 8 logged out. Waiting for processes to exit. Oct 2 21:02:20.678271 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 21:02:20.679711 systemd-logind[1337]: Removed session 8. Oct 2 21:02:20.680415 systemd[1]: sshd@5-10.200.20.18:22-10.200.12.6:50310.service: Deactivated successfully. Oct 2 21:02:20.670000 audit[1682]: CRED_DISP pid=1682 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:20.725722 kernel: audit: type=1106 audit(1696280540.669:173): pid=1682 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:20.725782 kernel: audit: type=1104 audit(1696280540.670:174): pid=1682 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:20.725809 kernel: audit: type=1131 audit(1696280540.680:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.18:22-10.200.12.6:50310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:20.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.18:22-10.200.12.6:50310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:20.739081 systemd[1]: Started sshd@6-10.200.20.18:22-10.200.12.6:50318.service. Oct 2 21:02:20.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.18:22-10.200.12.6:50318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:20.875245 systemd-timesyncd[1298]: Contacted time server 104.131.139.195:123 (0.flatcar.pool.ntp.org). Oct 2 21:02:20.875784 systemd-timesyncd[1298]: Initial clock synchronization to Mon 2023-10-02 21:02:20.881373 UTC. Oct 2 21:02:21.197000 audit[1712]: USER_ACCT pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:21.198411 sshd[1712]: Accepted publickey for core from 10.200.12.6 port 50318 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:21.199000 audit[1712]: CRED_ACQ pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:21.199000 audit[1712]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffceaf2b30 a2=3 a3=1 items=0 ppid=1 pid=1712 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:21.199000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:02:21.200293 sshd[1712]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:21.204656 systemd-logind[1337]: New session 9 of user core. Oct 2 21:02:21.204732 systemd[1]: Started session-9.scope. Oct 2 21:02:21.208000 audit[1712]: USER_START pid=1712 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:21.211000 audit[1714]: CRED_ACQ pid=1714 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:21.460000 audit[1715]: USER_ACCT pid=1715 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:21.462192 sudo[1715]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 21:02:21.461000 audit[1715]: CRED_REFR pid=1715 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:21.462863 sudo[1715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:02:21.464000 audit[1715]: USER_START pid=1715 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:22.405773 systemd[1]: Starting docker.service... Oct 2 21:02:22.460353 env[1730]: time="2023-10-02T21:02:22.460286062Z" level=info msg="Starting up" Oct 2 21:02:22.462783 env[1730]: time="2023-10-02T21:02:22.462751750Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 21:02:22.462931 env[1730]: time="2023-10-02T21:02:22.462917892Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 21:02:22.463003 env[1730]: time="2023-10-02T21:02:22.462988599Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 21:02:22.463061 env[1730]: time="2023-10-02T21:02:22.463049142Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 21:02:22.468464 env[1730]: time="2023-10-02T21:02:22.468433809Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 21:02:22.468743 env[1730]: time="2023-10-02T21:02:22.468728320Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 21:02:22.468834 env[1730]: time="2023-10-02T21:02:22.468819434Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 21:02:22.468926 env[1730]: time="2023-10-02T21:02:22.468913910Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 21:02:22.476985 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport986987845-merged.mount: Deactivated successfully. Oct 2 21:02:22.558476 env[1730]: time="2023-10-02T21:02:22.558441292Z" level=info msg="Loading containers: start." Oct 2 21:02:22.681000 audit[1758]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1758 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.681000 audit[1758]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffeb2ca9c0 a2=0 a3=1 items=0 ppid=1730 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.681000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 21:02:22.685000 audit[1760]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1760 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.685000 audit[1760]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffcb330b50 a2=0 a3=1 items=0 ppid=1730 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.685000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 21:02:22.687000 audit[1762]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1762 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.687000 audit[1762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffff006360 a2=0 a3=1 items=0 ppid=1730 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.687000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 21:02:22.690000 audit[1764]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1764 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.690000 audit[1764]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe9f178f0 a2=0 a3=1 items=0 ppid=1730 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.690000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 21:02:22.693000 audit[1766]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1766 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.693000 audit[1766]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff0a842f0 a2=0 a3=1 items=0 ppid=1730 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.693000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 21:02:22.696000 audit[1768]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1768 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.696000 audit[1768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff2065720 a2=0 a3=1 items=0 ppid=1730 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.696000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 21:02:22.712000 audit[1770]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1770 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.712000 audit[1770]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffda3e5320 a2=0 a3=1 items=0 ppid=1730 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.712000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 21:02:22.715000 audit[1772]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1772 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.715000 audit[1772]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff70e86b0 a2=0 a3=1 items=0 ppid=1730 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.715000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 21:02:22.718000 audit[1774]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.718000 audit[1774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffee283b30 a2=0 a3=1 items=0 ppid=1730 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.718000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:02:22.733000 audit[1778]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1778 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.733000 audit[1778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff628eea0 a2=0 a3=1 items=0 ppid=1730 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.733000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:02:22.735000 audit[1779]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1779 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.735000 audit[1779]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff4ba7b70 a2=0 a3=1 items=0 ppid=1730 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.735000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:02:22.776673 kernel: Initializing XFRM netlink socket Oct 2 21:02:22.800294 env[1730]: time="2023-10-02T21:02:22.800257082Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 21:02:22.875000 audit[1787]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1787 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.875000 audit[1787]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd71fb5e0 a2=0 a3=1 items=0 ppid=1730 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.875000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 21:02:22.906000 audit[1790]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1790 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.906000 audit[1790]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc3da7260 a2=0 a3=1 items=0 ppid=1730 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.906000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 21:02:22.917000 audit[1794]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1794 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.917000 audit[1794]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffb4da100 a2=0 a3=1 items=0 ppid=1730 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.917000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 21:02:22.920000 audit[1796]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1796 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.920000 audit[1796]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff983dbb0 a2=0 a3=1 items=0 ppid=1730 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.920000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 21:02:22.923000 audit[1798]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1798 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.923000 audit[1798]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffc0901cc0 a2=0 a3=1 items=0 ppid=1730 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.923000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 21:02:22.927000 audit[1800]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1800 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.927000 audit[1800]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc4b168e0 a2=0 a3=1 items=0 ppid=1730 pid=1800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.927000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 21:02:22.929000 audit[1802]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1802 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.929000 audit[1802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffc90d53b0 a2=0 a3=1 items=0 ppid=1730 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.929000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 21:02:22.933000 audit[1804]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1804 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.933000 audit[1804]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffdb1e1c60 a2=0 a3=1 items=0 ppid=1730 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.933000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 21:02:22.936000 audit[1806]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1806 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.936000 audit[1806]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffcecb8090 a2=0 a3=1 items=0 ppid=1730 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.936000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 21:02:22.941000 audit[1808]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1808 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.941000 audit[1808]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffedb42030 a2=0 a3=1 items=0 ppid=1730 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.941000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 21:02:22.946000 audit[1810]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1810 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.946000 audit[1810]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe45a5870 a2=0 a3=1 items=0 ppid=1730 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.946000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 21:02:22.948580 systemd-networkd[1498]: docker0: Link UP Oct 2 21:02:22.982000 audit[1814]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1814 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.982000 audit[1814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff36076b0 a2=0 a3=1 items=0 ppid=1730 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.982000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:02:22.984000 audit[1815]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1815 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:22.984000 audit[1815]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffda862180 a2=0 a3=1 items=0 ppid=1730 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:22.984000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:02:22.987176 env[1730]: time="2023-10-02T21:02:22.987140793Z" level=info msg="Loading containers: done." Oct 2 21:02:22.998614 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck676752368-merged.mount: Deactivated successfully. Oct 2 21:02:23.021192 env[1730]: time="2023-10-02T21:02:23.021150816Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 21:02:23.021578 env[1730]: time="2023-10-02T21:02:23.021559920Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 21:02:23.021781 env[1730]: time="2023-10-02T21:02:23.021766513Z" level=info msg="Daemon has completed initialization" Oct 2 21:02:23.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:23.058911 systemd[1]: Started docker.service. Oct 2 21:02:23.059541 env[1730]: time="2023-10-02T21:02:23.059462897Z" level=info msg="API listen on /run/docker.sock" Oct 2 21:02:23.095460 systemd[1]: Reloading. Oct 2 21:02:23.212290 /usr/lib/systemd/system-generators/torcx-generator[1861]: time="2023-10-02T21:02:23Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:02:23.218692 /usr/lib/systemd/system-generators/torcx-generator[1861]: time="2023-10-02T21:02:23Z" level=info msg="torcx already run" Oct 2 21:02:23.355105 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:02:23.355129 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:02:23.371278 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:02:23.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.438000 audit: BPF prog-id=35 op=LOAD Oct 2 21:02:23.438000 audit: BPF prog-id=28 op=UNLOAD Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit: BPF prog-id=36 op=LOAD Oct 2 21:02:23.439000 audit: BPF prog-id=32 op=UNLOAD Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.440000 audit: BPF prog-id=37 op=LOAD Oct 2 21:02:23.440000 audit: BPF prog-id=34 op=UNLOAD Oct 2 21:02:23.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.441000 audit: BPF prog-id=38 op=LOAD Oct 2 21:02:23.441000 audit: BPF prog-id=27 op=UNLOAD Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit: BPF prog-id=39 op=LOAD Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit: BPF prog-id=40 op=LOAD Oct 2 21:02:23.443000 audit: BPF prog-id=21 op=UNLOAD Oct 2 21:02:23.443000 audit: BPF prog-id=22 op=UNLOAD Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit: BPF prog-id=41 op=LOAD Oct 2 21:02:23.444000 audit: BPF prog-id=29 op=UNLOAD Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit: BPF prog-id=42 op=LOAD Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.444000 audit: BPF prog-id=43 op=LOAD Oct 2 21:02:23.444000 audit: BPF prog-id=30 op=UNLOAD Oct 2 21:02:23.444000 audit: BPF prog-id=31 op=UNLOAD Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit: BPF prog-id=44 op=LOAD Oct 2 21:02:23.445000 audit: BPF prog-id=24 op=UNLOAD Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit: BPF prog-id=45 op=LOAD Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.445000 audit: BPF prog-id=46 op=LOAD Oct 2 21:02:23.445000 audit: BPF prog-id=25 op=UNLOAD Oct 2 21:02:23.445000 audit: BPF prog-id=26 op=UNLOAD Oct 2 21:02:23.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit: BPF prog-id=47 op=LOAD Oct 2 21:02:23.447000 audit: BPF prog-id=18 op=UNLOAD Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit: BPF prog-id=48 op=LOAD Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:23.447000 audit: BPF prog-id=49 op=LOAD Oct 2 21:02:23.447000 audit: BPF prog-id=19 op=UNLOAD Oct 2 21:02:23.447000 audit: BPF prog-id=20 op=UNLOAD Oct 2 21:02:23.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:23.465264 systemd[1]: Started kubelet.service. Oct 2 21:02:23.575675 kubelet[1920]: E1002 21:02:23.575591 1920 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 21:02:23.578037 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:02:23.578172 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:02:23.577000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:02:28.509488 env[1352]: time="2023-10-02T21:02:28.509447811Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 21:02:29.501219 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3914313297.mount: Deactivated successfully. Oct 2 21:02:32.835828 env[1352]: time="2023-10-02T21:02:32.835771549Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:32.840406 env[1352]: time="2023-10-02T21:02:32.840368817Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:32.843063 env[1352]: time="2023-10-02T21:02:32.843029102Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:32.848166 env[1352]: time="2023-10-02T21:02:32.848126229Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:32.848842 env[1352]: time="2023-10-02T21:02:32.848812284Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99\"" Oct 2 21:02:32.884096 env[1352]: time="2023-10-02T21:02:32.884060005Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 21:02:33.766759 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 21:02:33.766956 systemd[1]: Stopped kubelet.service. Oct 2 21:02:33.795705 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 21:02:33.795818 kernel: audit: type=1130 audit(1696280553.765:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:33.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:33.770775 systemd[1]: Started kubelet.service. Oct 2 21:02:33.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:33.815453 kernel: audit: type=1131 audit(1696280553.765:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:33.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:33.835615 kernel: audit: type=1130 audit(1696280553.770:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:33.885924 kubelet[1945]: E1002 21:02:33.885861 1945 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 21:02:33.888622 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:02:33.888757 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:02:33.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:02:33.908625 kernel: audit: type=1131 audit(1696280553.887:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:02:35.947013 env[1352]: time="2023-10-02T21:02:35.946964013Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:35.956081 env[1352]: time="2023-10-02T21:02:35.956007845Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:35.964286 env[1352]: time="2023-10-02T21:02:35.964212260Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:35.968306 env[1352]: time="2023-10-02T21:02:35.968247036Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:35.969133 env[1352]: time="2023-10-02T21:02:35.969103976Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013\"" Oct 2 21:02:35.993450 env[1352]: time="2023-10-02T21:02:35.993407010Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 21:02:38.337205 env[1352]: time="2023-10-02T21:02:38.337150944Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:38.343218 env[1352]: time="2023-10-02T21:02:38.343166231Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:38.347691 env[1352]: time="2023-10-02T21:02:38.347647752Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:38.351311 env[1352]: time="2023-10-02T21:02:38.351270477Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:38.351941 env[1352]: time="2023-10-02T21:02:38.351908803Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803\"" Oct 2 21:02:38.385719 env[1352]: time="2023-10-02T21:02:38.385632044Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 21:02:39.294154 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount210687733.mount: Deactivated successfully. Oct 2 21:02:40.377067 env[1352]: time="2023-10-02T21:02:40.377008183Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:40.383312 env[1352]: time="2023-10-02T21:02:40.383275282Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:40.386705 env[1352]: time="2023-10-02T21:02:40.386664801Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:40.390113 env[1352]: time="2023-10-02T21:02:40.390087884Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:40.390463 env[1352]: time="2023-10-02T21:02:40.390431085Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343\"" Oct 2 21:02:40.404714 env[1352]: time="2023-10-02T21:02:40.404644160Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 21:02:40.950944 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3736160053.mount: Deactivated successfully. Oct 2 21:02:40.974025 env[1352]: time="2023-10-02T21:02:40.973982451Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:40.980835 env[1352]: time="2023-10-02T21:02:40.980799774Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:40.983906 env[1352]: time="2023-10-02T21:02:40.983862735Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:40.987981 env[1352]: time="2023-10-02T21:02:40.987953937Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:40.988369 env[1352]: time="2023-10-02T21:02:40.988341543Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 21:02:41.002191 env[1352]: time="2023-10-02T21:02:41.002150806Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 21:02:41.906733 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1395185809.mount: Deactivated successfully. Oct 2 21:02:44.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:44.016472 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 21:02:44.016671 systemd[1]: Stopped kubelet.service. Oct 2 21:02:44.018290 systemd[1]: Started kubelet.service. Oct 2 21:02:44.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:44.067901 kernel: audit: type=1130 audit(1696280564.016:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:44.068132 kernel: audit: type=1131 audit(1696280564.016:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:44.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:44.096973 kernel: audit: type=1130 audit(1696280564.016:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:44.158311 kubelet[1972]: E1002 21:02:44.158231 1972 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 21:02:44.159994 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:02:44.160142 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:02:44.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:02:44.191795 kernel: audit: type=1131 audit(1696280564.159:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:02:46.592227 env[1352]: time="2023-10-02T21:02:46.592169883Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:46.598549 env[1352]: time="2023-10-02T21:02:46.598505190Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:46.609212 env[1352]: time="2023-10-02T21:02:46.609175883Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:46.614562 env[1352]: time="2023-10-02T21:02:46.614517351Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:46.615344 env[1352]: time="2023-10-02T21:02:46.615318615Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 21:02:46.629630 env[1352]: time="2023-10-02T21:02:46.629574875Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 21:02:47.298350 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1771079751.mount: Deactivated successfully. Oct 2 21:02:47.881414 env[1352]: time="2023-10-02T21:02:47.881370706Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:47.886558 env[1352]: time="2023-10-02T21:02:47.886520173Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:47.890573 env[1352]: time="2023-10-02T21:02:47.890541674Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:47.894389 env[1352]: time="2023-10-02T21:02:47.894360161Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:47.895124 env[1352]: time="2023-10-02T21:02:47.895099336Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 21:02:53.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:53.842731 systemd[1]: Stopped kubelet.service. Oct 2 21:02:53.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:53.900754 kernel: audit: type=1130 audit(1696280573.841:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:53.900870 kernel: audit: type=1131 audit(1696280573.841:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:53.913890 systemd[1]: Reloading. Oct 2 21:02:54.017328 /usr/lib/systemd/system-generators/torcx-generator[2062]: time="2023-10-02T21:02:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:02:54.029690 /usr/lib/systemd/system-generators/torcx-generator[2062]: time="2023-10-02T21:02:54Z" level=info msg="torcx already run" Oct 2 21:02:54.139231 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:02:54.139692 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:02:54.155128 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:02:54.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.244627 kernel: audit: type=1400 audit(1696280574.222:394): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.244727 kernel: audit: type=1400 audit(1696280574.222:395): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.302738 kernel: audit: type=1400 audit(1696280574.222:396): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.302858 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 21:02:54.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.326007 kernel: audit: type=1400 audit(1696280574.222:397): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.326119 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 21:02:54.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.352433 kernel: audit: type=1400 audit(1696280574.222:398): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.352574 kernel: audit: backlog limit exceeded Oct 2 21:02:54.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.240000 audit: BPF prog-id=50 op=LOAD Oct 2 21:02:54.240000 audit: BPF prog-id=35 op=UNLOAD Oct 2 21:02:54.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.241000 audit: BPF prog-id=51 op=LOAD Oct 2 21:02:54.241000 audit: BPF prog-id=36 op=UNLOAD Oct 2 21:02:54.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.242000 audit: BPF prog-id=52 op=LOAD Oct 2 21:02:54.242000 audit: BPF prog-id=37 op=UNLOAD Oct 2 21:02:54.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.278000 audit: BPF prog-id=53 op=LOAD Oct 2 21:02:54.278000 audit: BPF prog-id=38 op=UNLOAD Oct 2 21:02:54.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.300000 audit: BPF prog-id=54 op=LOAD Oct 2 21:02:54.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.300000 audit: BPF prog-id=55 op=LOAD Oct 2 21:02:54.358000 audit: BPF prog-id=40 op=UNLOAD Oct 2 21:02:54.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit: BPF prog-id=56 op=LOAD Oct 2 21:02:54.359000 audit: BPF prog-id=41 op=UNLOAD Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit: BPF prog-id=57 op=LOAD Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.359000 audit: BPF prog-id=58 op=LOAD Oct 2 21:02:54.359000 audit: BPF prog-id=42 op=UNLOAD Oct 2 21:02:54.359000 audit: BPF prog-id=43 op=UNLOAD Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit: BPF prog-id=59 op=LOAD Oct 2 21:02:54.360000 audit: BPF prog-id=44 op=UNLOAD Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit: BPF prog-id=60 op=LOAD Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.360000 audit: BPF prog-id=61 op=LOAD Oct 2 21:02:54.361000 audit: BPF prog-id=45 op=UNLOAD Oct 2 21:02:54.361000 audit: BPF prog-id=46 op=UNLOAD Oct 2 21:02:54.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit: BPF prog-id=62 op=LOAD Oct 2 21:02:54.362000 audit: BPF prog-id=47 op=UNLOAD Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit: BPF prog-id=63 op=LOAD Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:54.362000 audit: BPF prog-id=64 op=LOAD Oct 2 21:02:54.362000 audit: BPF prog-id=48 op=UNLOAD Oct 2 21:02:54.362000 audit: BPF prog-id=49 op=UNLOAD Oct 2 21:02:54.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:54.389327 systemd[1]: Started kubelet.service. Oct 2 21:02:54.471335 kubelet[2122]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 21:02:54.471335 kubelet[2122]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:02:54.471767 kubelet[2122]: I1002 21:02:54.471586 2122 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 21:02:54.472917 kubelet[2122]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 21:02:54.472917 kubelet[2122]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:02:55.187101 kubelet[2122]: I1002 21:02:55.187068 2122 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 21:02:55.187290 kubelet[2122]: I1002 21:02:55.187278 2122 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 21:02:55.187561 kubelet[2122]: I1002 21:02:55.187545 2122 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 21:02:55.193233 kubelet[2122]: E1002 21:02:55.193186 2122 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.20.18:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:55.193466 kubelet[2122]: I1002 21:02:55.193452 2122 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 21:02:55.193967 kubelet[2122]: W1002 21:02:55.193948 2122 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:02:55.194514 kubelet[2122]: I1002 21:02:55.194496 2122 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 21:02:55.194917 kubelet[2122]: I1002 21:02:55.194900 2122 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 21:02:55.194984 kubelet[2122]: I1002 21:02:55.194965 2122 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 21:02:55.195074 kubelet[2122]: I1002 21:02:55.194986 2122 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 21:02:55.195074 kubelet[2122]: I1002 21:02:55.194998 2122 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 21:02:55.195142 kubelet[2122]: I1002 21:02:55.195125 2122 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:02:55.198490 kubelet[2122]: I1002 21:02:55.198464 2122 kubelet.go:398] "Attempting to sync node with API server" Oct 2 21:02:55.198490 kubelet[2122]: I1002 21:02:55.198487 2122 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 21:02:55.198625 kubelet[2122]: I1002 21:02:55.198553 2122 kubelet.go:297] "Adding apiserver pod source" Oct 2 21:02:55.198625 kubelet[2122]: I1002 21:02:55.198564 2122 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 21:02:55.200819 kubelet[2122]: I1002 21:02:55.200802 2122 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 21:02:55.201432 kubelet[2122]: W1002 21:02:55.201414 2122 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 21:02:55.202001 kubelet[2122]: I1002 21:02:55.201982 2122 server.go:1186] "Started kubelet" Oct 2 21:02:55.202243 kubelet[2122]: W1002 21:02:55.202207 2122 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:55.202330 kubelet[2122]: E1002 21:02:55.202320 2122 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:55.203008 kubelet[2122]: W1002 21:02:55.202970 2122 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-9c05479676&limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:55.203096 kubelet[2122]: E1002 21:02:55.203008 2122 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-9c05479676&limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:55.203133 kubelet[2122]: I1002 21:02:55.203116 2122 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 21:02:55.202000 audit[2122]: AVC avc: denied { mac_admin } for pid=2122 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:55.202000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:02:55.202000 audit[2122]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ee98f0 a1=4000ef9530 a2=4000ee98c0 a3=25 items=0 ppid=1 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.202000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:02:55.202000 audit[2122]: AVC avc: denied { mac_admin } for pid=2122 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:55.202000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:02:55.202000 audit[2122]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ef7f00 a1=4000ef9548 a2=4000ee9980 a3=25 items=0 ppid=1 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.202000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:02:55.204836 kubelet[2122]: I1002 21:02:55.204493 2122 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 21:02:55.204836 kubelet[2122]: I1002 21:02:55.204535 2122 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 21:02:55.204836 kubelet[2122]: I1002 21:02:55.204584 2122 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 21:02:55.205028 kubelet[2122]: E1002 21:02:55.205014 2122 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 21:02:55.206635 kubelet[2122]: I1002 21:02:55.206589 2122 server.go:451] "Adding debug handlers to kubelet server" Oct 2 21:02:55.207118 kubelet[2122]: E1002 21:02:55.206643 2122 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 21:02:55.210817 kubelet[2122]: I1002 21:02:55.210797 2122 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 21:02:55.211106 kubelet[2122]: E1002 21:02:55.211006 2122 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-9c05479676.178a6632244ec3c2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-9c05479676", UID:"ci-3510.3.0-a-9c05479676", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-9c05479676"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 201952706, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 201952706, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.20.18:6443/api/v1/namespaces/default/events": dial tcp 10.200.20.18:6443: connect: connection refused'(may retry after sleeping) Oct 2 21:02:55.213455 kubelet[2122]: W1002 21:02:55.213416 2122 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:55.213559 kubelet[2122]: E1002 21:02:55.213543 2122 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:55.213705 kubelet[2122]: E1002 21:02:55.213687 2122 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.200.20.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-9c05479676?timeout=10s": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:55.212000 audit[2132]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2132 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.212000 audit[2132]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd25a6df0 a2=0 a3=1 items=0 ppid=2122 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.212000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 21:02:55.214420 kubelet[2122]: I1002 21:02:55.214392 2122 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 21:02:55.214000 audit[2133]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2133 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.214000 audit[2133]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcc77a300 a2=0 a3=1 items=0 ppid=2122 pid=2133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.214000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 21:02:55.216000 audit[2135]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.216000 audit[2135]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffffea43f20 a2=0 a3=1 items=0 ppid=2122 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.216000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:02:55.219000 audit[2137]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.219000 audit[2137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe0dd41c0 a2=0 a3=1 items=0 ppid=2122 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.219000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:02:55.268000 audit[2144]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2144 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.268000 audit[2144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffd9f154e0 a2=0 a3=1 items=0 ppid=2122 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.268000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 21:02:55.273000 audit[2145]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.273000 audit[2145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff9356290 a2=0 a3=1 items=0 ppid=2122 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.273000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 21:02:55.287672 kubelet[2122]: I1002 21:02:55.287648 2122 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 21:02:55.287860 kubelet[2122]: I1002 21:02:55.287847 2122 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 21:02:55.287937 kubelet[2122]: I1002 21:02:55.287928 2122 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:02:55.291901 kubelet[2122]: I1002 21:02:55.291875 2122 policy_none.go:49] "None policy: Start" Oct 2 21:02:55.292709 kubelet[2122]: I1002 21:02:55.292684 2122 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 21:02:55.292709 kubelet[2122]: I1002 21:02:55.292713 2122 state_mem.go:35] "Initializing new in-memory state store" Oct 2 21:02:55.299056 systemd[1]: Created slice kubepods.slice. Oct 2 21:02:55.303792 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 21:02:55.307165 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 21:02:55.311369 kubelet[2122]: I1002 21:02:55.311333 2122 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 21:02:55.309000 audit[2122]: AVC avc: denied { mac_admin } for pid=2122 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:55.309000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:02:55.309000 audit[2122]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ae4420 a1=4000af2018 a2=4000ae43f0 a3=25 items=0 ppid=1 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.309000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:02:55.311625 kubelet[2122]: I1002 21:02:55.311414 2122 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 21:02:55.311625 kubelet[2122]: I1002 21:02:55.311584 2122 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 21:02:55.312000 audit[2149]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_rule pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.312000 audit[2149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffdd89b7f0 a2=0 a3=1 items=0 ppid=2122 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.312000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 21:02:55.314382 kubelet[2122]: E1002 21:02:55.314172 2122 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-9c05479676\" not found" Oct 2 21:02:55.315511 kubelet[2122]: I1002 21:02:55.315495 2122 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.316082 kubelet[2122]: E1002 21:02:55.316067 2122 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.18:6443/api/v1/nodes\": dial tcp 10.200.20.18:6443: connect: connection refused" node="ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.352000 audit[2153]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_rule pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.352000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffd319f830 a2=0 a3=1 items=0 ppid=2122 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.352000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 21:02:55.356000 audit[2154]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.356000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff1061ac0 a2=0 a3=1 items=0 ppid=2122 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.356000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 21:02:55.362000 audit[2155]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.362000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc83d2b50 a2=0 a3=1 items=0 ppid=2122 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.362000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 21:02:55.371000 audit[2157]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.371000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffdfd121a0 a2=0 a3=1 items=0 ppid=2122 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.371000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 21:02:55.381000 audit[2159]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.381000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffffb0d640 a2=0 a3=1 items=0 ppid=2122 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.381000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 21:02:55.386000 audit[2161]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_rule pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.386000 audit[2161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffe2058300 a2=0 a3=1 items=0 ppid=2122 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.386000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 21:02:55.390000 audit[2163]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_rule pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.390000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffe45b8f80 a2=0 a3=1 items=0 ppid=2122 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.390000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 21:02:55.394000 audit[2165]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_rule pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.394000 audit[2165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=ffffea70d5e0 a2=0 a3=1 items=0 ppid=2122 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.394000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 21:02:55.396262 kubelet[2122]: I1002 21:02:55.396238 2122 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 21:02:55.396000 audit[2166]: NETFILTER_CFG table=mangle:44 family=10 entries=2 op=nft_register_chain pid=2166 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.396000 audit[2166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffa46a970 a2=0 a3=1 items=0 ppid=2122 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.396000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 21:02:55.396000 audit[2167]: NETFILTER_CFG table=mangle:45 family=2 entries=1 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.396000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe1270170 a2=0 a3=1 items=0 ppid=2122 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.396000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 21:02:55.397000 audit[2168]: NETFILTER_CFG table=nat:46 family=2 entries=1 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.397000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff98e8c00 a2=0 a3=1 items=0 ppid=2122 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.397000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 21:02:55.398000 audit[2169]: NETFILTER_CFG table=nat:47 family=10 entries=2 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.398000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffdf826930 a2=0 a3=1 items=0 ppid=2122 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.398000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 21:02:55.399000 audit[2170]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:55.399000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe1b55600 a2=0 a3=1 items=0 ppid=2122 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.399000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 21:02:55.402000 audit[2172]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_rule pid=2172 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.402000 audit[2172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff9f402b0 a2=0 a3=1 items=0 ppid=2122 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.402000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 21:02:55.403000 audit[2173]: NETFILTER_CFG table=filter:50 family=10 entries=2 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.403000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffe3365d10 a2=0 a3=1 items=0 ppid=2122 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.403000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 21:02:55.407000 audit[2175]: NETFILTER_CFG table=filter:51 family=10 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.407000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffcc4e9710 a2=0 a3=1 items=0 ppid=2122 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.407000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 21:02:55.409000 audit[2176]: NETFILTER_CFG table=nat:52 family=10 entries=1 op=nft_register_chain pid=2176 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.409000 audit[2176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff5229840 a2=0 a3=1 items=0 ppid=2122 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.409000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 21:02:55.410000 audit[2177]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_chain pid=2177 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.410000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff2ae6e60 a2=0 a3=1 items=0 ppid=2122 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.410000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 21:02:55.414142 kubelet[2122]: E1002 21:02:55.414098 2122 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.200.20.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-9c05479676?timeout=10s": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:55.414000 audit[2179]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.414000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc1237300 a2=0 a3=1 items=0 ppid=2122 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.414000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 21:02:55.417000 audit[2181]: NETFILTER_CFG table=nat:55 family=10 entries=2 op=nft_register_chain pid=2181 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.417000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffdfcfba00 a2=0 a3=1 items=0 ppid=2122 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.417000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 21:02:55.421000 audit[2183]: NETFILTER_CFG table=nat:56 family=10 entries=1 op=nft_register_rule pid=2183 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.421000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffc8404470 a2=0 a3=1 items=0 ppid=2122 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.421000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 21:02:55.424000 audit[2185]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.424000 audit[2185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=fffff9221020 a2=0 a3=1 items=0 ppid=2122 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.424000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 21:02:55.443000 audit[2187]: NETFILTER_CFG table=nat:58 family=10 entries=1 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.443000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=ffffeb367c40 a2=0 a3=1 items=0 ppid=2122 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.443000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 21:02:55.449406 kubelet[2122]: I1002 21:02:55.445656 2122 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 21:02:55.449406 kubelet[2122]: I1002 21:02:55.445678 2122 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 21:02:55.449406 kubelet[2122]: I1002 21:02:55.445709 2122 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 21:02:55.449406 kubelet[2122]: E1002 21:02:55.445750 2122 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 21:02:55.449406 kubelet[2122]: W1002 21:02:55.446342 2122 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:55.449406 kubelet[2122]: E1002 21:02:55.446387 2122 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:55.449000 audit[2188]: NETFILTER_CFG table=mangle:59 family=10 entries=1 op=nft_register_chain pid=2188 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.449000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcf935d40 a2=0 a3=1 items=0 ppid=2122 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.449000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 21:02:55.453000 audit[2189]: NETFILTER_CFG table=nat:60 family=10 entries=1 op=nft_register_chain pid=2189 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.453000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd53b540 a2=0 a3=1 items=0 ppid=2122 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.453000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 21:02:55.457000 audit[2190]: NETFILTER_CFG table=filter:61 family=10 entries=1 op=nft_register_chain pid=2190 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:02:55.457000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe904b2e0 a2=0 a3=1 items=0 ppid=2122 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:55.457000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 21:02:55.518557 kubelet[2122]: I1002 21:02:55.518528 2122 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.518854 kubelet[2122]: E1002 21:02:55.518817 2122 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.18:6443/api/v1/nodes\": dial tcp 10.200.20.18:6443: connect: connection refused" node="ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.546170 kubelet[2122]: I1002 21:02:55.546131 2122 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:02:55.547904 kubelet[2122]: I1002 21:02:55.547879 2122 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:02:55.549568 kubelet[2122]: I1002 21:02:55.549545 2122 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:02:55.550539 kubelet[2122]: I1002 21:02:55.550082 2122 status_manager.go:698] "Failed to get status for pod" podUID=a702df7bee8664dc095179047dddc041 pod="kube-system/kube-apiserver-ci-3510.3.0-a-9c05479676" err="Get \"https://10.200.20.18:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510.3.0-a-9c05479676\": dial tcp 10.200.20.18:6443: connect: connection refused" Oct 2 21:02:55.554223 systemd[1]: Created slice kubepods-burstable-poda702df7bee8664dc095179047dddc041.slice. Oct 2 21:02:55.556427 kubelet[2122]: I1002 21:02:55.556351 2122 status_manager.go:698] "Failed to get status for pod" podUID=c0698acdc067afb10476c71021aba93f pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" err="Get \"https://10.200.20.18:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510.3.0-a-9c05479676\": dial tcp 10.200.20.18:6443: connect: connection refused" Oct 2 21:02:55.558443 kubelet[2122]: I1002 21:02:55.558403 2122 status_manager.go:698] "Failed to get status for pod" podUID=cb77dbfa78b9f958553368e23bdf4223 pod="kube-system/kube-scheduler-ci-3510.3.0-a-9c05479676" err="Get \"https://10.200.20.18:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510.3.0-a-9c05479676\": dial tcp 10.200.20.18:6443: connect: connection refused" Oct 2 21:02:55.568443 systemd[1]: Created slice kubepods-burstable-podc0698acdc067afb10476c71021aba93f.slice. Oct 2 21:02:55.573450 systemd[1]: Created slice kubepods-burstable-podcb77dbfa78b9f958553368e23bdf4223.slice. Oct 2 21:02:55.618360 kubelet[2122]: I1002 21:02:55.618316 2122 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/c0698acdc067afb10476c71021aba93f-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-9c05479676\" (UID: \"c0698acdc067afb10476c71021aba93f\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.618360 kubelet[2122]: I1002 21:02:55.618366 2122 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c0698acdc067afb10476c71021aba93f-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-9c05479676\" (UID: \"c0698acdc067afb10476c71021aba93f\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.618577 kubelet[2122]: I1002 21:02:55.618389 2122 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/c0698acdc067afb10476c71021aba93f-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-9c05479676\" (UID: \"c0698acdc067afb10476c71021aba93f\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.618577 kubelet[2122]: I1002 21:02:55.618420 2122 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/cb77dbfa78b9f958553368e23bdf4223-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-9c05479676\" (UID: \"cb77dbfa78b9f958553368e23bdf4223\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.618577 kubelet[2122]: I1002 21:02:55.618442 2122 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a702df7bee8664dc095179047dddc041-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-9c05479676\" (UID: \"a702df7bee8664dc095179047dddc041\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.618577 kubelet[2122]: I1002 21:02:55.618467 2122 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/c0698acdc067afb10476c71021aba93f-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-9c05479676\" (UID: \"c0698acdc067afb10476c71021aba93f\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.618577 kubelet[2122]: I1002 21:02:55.618501 2122 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/c0698acdc067afb10476c71021aba93f-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-9c05479676\" (UID: \"c0698acdc067afb10476c71021aba93f\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.618966 kubelet[2122]: I1002 21:02:55.618521 2122 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a702df7bee8664dc095179047dddc041-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-9c05479676\" (UID: \"a702df7bee8664dc095179047dddc041\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.618966 kubelet[2122]: I1002 21:02:55.618539 2122 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a702df7bee8664dc095179047dddc041-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-9c05479676\" (UID: \"a702df7bee8664dc095179047dddc041\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.815365 kubelet[2122]: E1002 21:02:55.815334 2122 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.200.20.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-9c05479676?timeout=10s": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:55.865747 env[1352]: time="2023-10-02T21:02:55.865673735Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-9c05479676,Uid:a702df7bee8664dc095179047dddc041,Namespace:kube-system,Attempt:0,}" Oct 2 21:02:55.873327 env[1352]: time="2023-10-02T21:02:55.873046385Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-9c05479676,Uid:c0698acdc067afb10476c71021aba93f,Namespace:kube-system,Attempt:0,}" Oct 2 21:02:55.876506 env[1352]: time="2023-10-02T21:02:55.876448257Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-9c05479676,Uid:cb77dbfa78b9f958553368e23bdf4223,Namespace:kube-system,Attempt:0,}" Oct 2 21:02:55.920640 kubelet[2122]: I1002 21:02:55.920617 2122 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-9c05479676" Oct 2 21:02:55.921079 kubelet[2122]: E1002 21:02:55.921065 2122 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.18:6443/api/v1/nodes\": dial tcp 10.200.20.18:6443: connect: connection refused" node="ci-3510.3.0-a-9c05479676" Oct 2 21:02:56.137490 kubelet[2122]: W1002 21:02:56.137385 2122 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:56.137490 kubelet[2122]: E1002 21:02:56.137425 2122 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:56.497818 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3331241305.mount: Deactivated successfully. Oct 2 21:02:56.520107 kubelet[2122]: W1002 21:02:56.520033 2122 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:56.520107 kubelet[2122]: E1002 21:02:56.520089 2122 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:56.522419 kubelet[2122]: W1002 21:02:56.522379 2122 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-9c05479676&limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:56.522506 kubelet[2122]: E1002 21:02:56.522428 2122 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-9c05479676&limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:56.524480 env[1352]: time="2023-10-02T21:02:56.524447043Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:56.538664 env[1352]: time="2023-10-02T21:02:56.538623158Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:56.545018 env[1352]: time="2023-10-02T21:02:56.544987705Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:56.548936 env[1352]: time="2023-10-02T21:02:56.548902669Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:56.553335 env[1352]: time="2023-10-02T21:02:56.553283533Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:56.558430 env[1352]: time="2023-10-02T21:02:56.558385867Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:56.563713 env[1352]: time="2023-10-02T21:02:56.563672969Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:56.566277 env[1352]: time="2023-10-02T21:02:56.566243717Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:56.569916 env[1352]: time="2023-10-02T21:02:56.569882950Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:56.574862 env[1352]: time="2023-10-02T21:02:56.574828157Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:56.584262 env[1352]: time="2023-10-02T21:02:56.584220031Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:56.591326 env[1352]: time="2023-10-02T21:02:56.591286408Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:02:56.599069 kubelet[2122]: W1002 21:02:56.599011 2122 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:56.599069 kubelet[2122]: E1002 21:02:56.599049 2122 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:56.616740 kubelet[2122]: E1002 21:02:56.616704 2122 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.200.20.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-9c05479676?timeout=10s": dial tcp 10.200.20.18:6443: connect: connection refused Oct 2 21:02:56.631376 env[1352]: time="2023-10-02T21:02:56.631309487Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:02:56.632061 env[1352]: time="2023-10-02T21:02:56.631485735Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:02:56.632061 env[1352]: time="2023-10-02T21:02:56.631513736Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:02:56.632061 env[1352]: time="2023-10-02T21:02:56.631755626Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c60fb67c5197215c1fba09ddd7975ab3dcab8f6e410795df930a67a5459dc095 pid=2198 runtime=io.containerd.runc.v2 Oct 2 21:02:56.650234 systemd[1]: Started cri-containerd-c60fb67c5197215c1fba09ddd7975ab3dcab8f6e410795df930a67a5459dc095.scope. Oct 2 21:02:56.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.692000 audit: BPF prog-id=65 op=LOAD Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2198 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336306662363763353139373231356331666261303964646437393735 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2198 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336306662363763353139373231356331666261303964646437393735 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit: BPF prog-id=66 op=LOAD Oct 2 21:02:56.693000 audit[2209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2198 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336306662363763353139373231356331666261303964646437393735 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit: BPF prog-id=67 op=LOAD Oct 2 21:02:56.693000 audit[2209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2198 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336306662363763353139373231356331666261303964646437393735 Oct 2 21:02:56.693000 audit: BPF prog-id=67 op=UNLOAD Oct 2 21:02:56.693000 audit: BPF prog-id=66 op=UNLOAD Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.693000 audit: BPF prog-id=68 op=LOAD Oct 2 21:02:56.693000 audit[2209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2198 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336306662363763353139373231356331666261303964646437393735 Oct 2 21:02:56.699688 env[1352]: time="2023-10-02T21:02:56.697641191Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:02:56.699688 env[1352]: time="2023-10-02T21:02:56.697748275Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:02:56.699688 env[1352]: time="2023-10-02T21:02:56.697782357Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:02:56.699688 env[1352]: time="2023-10-02T21:02:56.698107730Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d3df52b94aa3bf514b8c950fd4ddfc3895e9a0ad2846015a2c952cb4a9147637 pid=2239 runtime=io.containerd.runc.v2 Oct 2 21:02:56.716840 env[1352]: time="2023-10-02T21:02:56.716754433Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:02:56.716954 env[1352]: time="2023-10-02T21:02:56.716847517Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:02:56.716954 env[1352]: time="2023-10-02T21:02:56.716873438Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:02:56.717079 env[1352]: time="2023-10-02T21:02:56.717042245Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1cd20aa76d412d6d367ea14581ce9dd8d4228473f9c48c27a17d66a54433d9c0 pid=2252 runtime=io.containerd.runc.v2 Oct 2 21:02:56.718273 env[1352]: time="2023-10-02T21:02:56.718229855Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-9c05479676,Uid:a702df7bee8664dc095179047dddc041,Namespace:kube-system,Attempt:0,} returns sandbox id \"c60fb67c5197215c1fba09ddd7975ab3dcab8f6e410795df930a67a5459dc095\"" Oct 2 21:02:56.728977 env[1352]: time="2023-10-02T21:02:56.728897102Z" level=info msg="CreateContainer within sandbox \"c60fb67c5197215c1fba09ddd7975ab3dcab8f6e410795df930a67a5459dc095\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 21:02:56.730466 kubelet[2122]: I1002 21:02:56.730429 2122 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-9c05479676" Oct 2 21:02:56.731488 kubelet[2122]: E1002 21:02:56.731449 2122 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.18:6443/api/v1/nodes\": dial tcp 10.200.20.18:6443: connect: connection refused" node="ci-3510.3.0-a-9c05479676" Oct 2 21:02:56.740981 systemd[1]: Started cri-containerd-1cd20aa76d412d6d367ea14581ce9dd8d4228473f9c48c27a17d66a54433d9c0.scope. Oct 2 21:02:56.745290 systemd[1]: Started cri-containerd-d3df52b94aa3bf514b8c950fd4ddfc3895e9a0ad2846015a2c952cb4a9147637.scope. Oct 2 21:02:56.783912 env[1352]: time="2023-10-02T21:02:56.783803487Z" level=info msg="CreateContainer within sandbox \"c60fb67c5197215c1fba09ddd7975ab3dcab8f6e410795df930a67a5459dc095\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"a15847a726ac0e66d45a55adf78ff96e9656d9432e46b36740739d7a087d64bb\"" Oct 2 21:02:56.784585 env[1352]: time="2023-10-02T21:02:56.784540717Z" level=info msg="StartContainer for \"a15847a726ac0e66d45a55adf78ff96e9656d9432e46b36740739d7a087d64bb\"" Oct 2 21:02:56.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.792000 audit: BPF prog-id=69 op=LOAD Oct 2 21:02:56.793000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.793000 audit[2272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2252 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.793000 audit: BPF prog-id=70 op=LOAD Oct 2 21:02:56.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163643230616137366434313264366433363765613134353831636539 Oct 2 21:02:56.794000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit[2272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2252 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163643230616137366434313264366433363765613134353831636539 Oct 2 21:02:56.794000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit[2251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2239 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.794000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433646635326239346161336266353134623863393530666434646466 Oct 2 21:02:56.795000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.795000 audit[2251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2239 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433646635326239346161336266353134623863393530666434646466 Oct 2 21:02:56.794000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.795000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.795000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.795000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.795000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.795000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.795000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit: BPF prog-id=71 op=LOAD Oct 2 21:02:56.795000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit[2272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2252 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.795000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163643230616137366434313264366433363765613134353831636539 Oct 2 21:02:56.795000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.795000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.796000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.796000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.796000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.796000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.796000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.796000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.796000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.796000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.796000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.795000 audit: BPF prog-id=72 op=LOAD Oct 2 21:02:56.795000 audit[2251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2239 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433646635326239346161336266353134623863393530666434646466 Oct 2 21:02:56.796000 audit: BPF prog-id=73 op=LOAD Oct 2 21:02:56.796000 audit[2272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2252 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.797000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163643230616137366434313264366433363765613134353831636539 Oct 2 21:02:56.797000 audit: BPF prog-id=73 op=UNLOAD Oct 2 21:02:56.797000 audit: BPF prog-id=71 op=UNLOAD Oct 2 21:02:56.797000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.798000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.797000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.797000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.797000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.797000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.797000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.798000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.797000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.798000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.797000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.798000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.798000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.798000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.798000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.798000 audit[2272]: AVC avc: denied { perfmon } for pid=2272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.798000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.797000 audit: BPF prog-id=74 op=LOAD Oct 2 21:02:56.797000 audit[2251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2239 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433646635326239346161336266353134623863393530666434646466 Oct 2 21:02:56.799000 audit: BPF prog-id=74 op=UNLOAD Oct 2 21:02:56.799000 audit: BPF prog-id=72 op=UNLOAD Oct 2 21:02:56.798000 audit[2272]: AVC avc: denied { bpf } for pid=2272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.799000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.799000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.799000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.799000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.799000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.799000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.799000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.799000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.798000 audit: BPF prog-id=75 op=LOAD Oct 2 21:02:56.799000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.798000 audit[2272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2252 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.799000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163643230616137366434313264366433363765613134353831636539 Oct 2 21:02:56.799000 audit: BPF prog-id=76 op=LOAD Oct 2 21:02:56.799000 audit[2251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2239 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433646635326239346161336266353134623863393530666434646466 Oct 2 21:02:56.813288 systemd[1]: Started cri-containerd-a15847a726ac0e66d45a55adf78ff96e9656d9432e46b36740739d7a087d64bb.scope. Oct 2 21:02:56.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.838000 audit: BPF prog-id=77 op=LOAD Oct 2 21:02:56.839000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.839000 audit[2307]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2198 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131353834376137323661633065363664343561353561646637386666 Oct 2 21:02:56.839000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.839000 audit[2307]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2198 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131353834376137323661633065363664343561353561646637386666 Oct 2 21:02:56.839000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.839000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.839000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.839000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.839000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.839000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.843101 env[1352]: time="2023-10-02T21:02:56.842114653Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-9c05479676,Uid:cb77dbfa78b9f958553368e23bdf4223,Namespace:kube-system,Attempt:0,} returns sandbox id \"d3df52b94aa3bf514b8c950fd4ddfc3895e9a0ad2846015a2c952cb4a9147637\"" Oct 2 21:02:56.839000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.839000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.839000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.839000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.839000 audit: BPF prog-id=78 op=LOAD Oct 2 21:02:56.839000 audit[2307]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2198 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131353834376137323661633065363664343561353561646637386666 Oct 2 21:02:56.842000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.842000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.842000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.842000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.842000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.845525 env[1352]: time="2023-10-02T21:02:56.845266586Z" level=info msg="CreateContainer within sandbox \"d3df52b94aa3bf514b8c950fd4ddfc3895e9a0ad2846015a2c952cb4a9147637\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 21:02:56.842000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.842000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.842000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.842000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.842000 audit: BPF prog-id=79 op=LOAD Oct 2 21:02:56.842000 audit[2307]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2198 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131353834376137323661633065363664343561353561646637386666 Oct 2 21:02:56.844000 audit: BPF prog-id=79 op=UNLOAD Oct 2 21:02:56.844000 audit: BPF prog-id=78 op=UNLOAD Oct 2 21:02:56.844000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.844000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.844000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.844000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.844000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.844000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.844000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.844000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.844000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.844000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.844000 audit: BPF prog-id=80 op=LOAD Oct 2 21:02:56.844000 audit[2307]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2198 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131353834376137323661633065363664343561353561646637386666 Oct 2 21:02:56.878451 env[1352]: time="2023-10-02T21:02:56.878380215Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-9c05479676,Uid:c0698acdc067afb10476c71021aba93f,Namespace:kube-system,Attempt:0,} returns sandbox id \"1cd20aa76d412d6d367ea14581ce9dd8d4228473f9c48c27a17d66a54433d9c0\"" Oct 2 21:02:56.883979 env[1352]: time="2023-10-02T21:02:56.883931928Z" level=info msg="CreateContainer within sandbox \"1cd20aa76d412d6d367ea14581ce9dd8d4228473f9c48c27a17d66a54433d9c0\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 21:02:56.903706 env[1352]: time="2023-10-02T21:02:56.903655956Z" level=info msg="StartContainer for \"a15847a726ac0e66d45a55adf78ff96e9656d9432e46b36740739d7a087d64bb\" returns successfully" Oct 2 21:02:56.910301 env[1352]: time="2023-10-02T21:02:56.910262593Z" level=info msg="CreateContainer within sandbox \"d3df52b94aa3bf514b8c950fd4ddfc3895e9a0ad2846015a2c952cb4a9147637\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"6fe5c8649da25af3895439cfd781f2d635fd0f60e93768982da7486baf441174\"" Oct 2 21:02:56.910973 env[1352]: time="2023-10-02T21:02:56.910943222Z" level=info msg="StartContainer for \"6fe5c8649da25af3895439cfd781f2d635fd0f60e93768982da7486baf441174\"" Oct 2 21:02:56.931664 env[1352]: time="2023-10-02T21:02:56.931619529Z" level=info msg="CreateContainer within sandbox \"1cd20aa76d412d6d367ea14581ce9dd8d4228473f9c48c27a17d66a54433d9c0\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"b3d7a83bff2ac76f7824ad3e96091eb714d5cfddc315de36935a9382c1e09c3c\"" Oct 2 21:02:56.934118 env[1352]: time="2023-10-02T21:02:56.934082153Z" level=info msg="StartContainer for \"b3d7a83bff2ac76f7824ad3e96091eb714d5cfddc315de36935a9382c1e09c3c\"" Oct 2 21:02:56.941133 systemd[1]: Started cri-containerd-6fe5c8649da25af3895439cfd781f2d635fd0f60e93768982da7486baf441174.scope. Oct 2 21:02:56.984791 systemd[1]: Started cri-containerd-b3d7a83bff2ac76f7824ad3e96091eb714d5cfddc315de36935a9382c1e09c3c.scope. Oct 2 21:02:56.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.997000 audit: BPF prog-id=81 op=LOAD Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2239 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666653563383634396461323561663338393534333963666437383166 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2239 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666653563383634396461323561663338393534333963666437383166 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit: BPF prog-id=82 op=LOAD Oct 2 21:02:56.998000 audit[2362]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2239 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666653563383634396461323561663338393534333963666437383166 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit: BPF prog-id=83 op=LOAD Oct 2 21:02:56.998000 audit[2362]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2239 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666653563383634396461323561663338393534333963666437383166 Oct 2 21:02:56.998000 audit: BPF prog-id=83 op=UNLOAD Oct 2 21:02:56.998000 audit: BPF prog-id=82 op=UNLOAD Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.998000 audit: BPF prog-id=84 op=LOAD Oct 2 21:02:56.998000 audit[2362]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2239 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666653563383634396461323561663338393534333963666437383166 Oct 2 21:02:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.024000 audit: BPF prog-id=85 op=LOAD Oct 2 21:02:57.024000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.024000 audit[2381]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2252 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:57.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233643761383362666632616337366637383234616433653936303931 Oct 2 21:02:57.024000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.024000 audit[2381]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2252 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:57.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233643761383362666632616337366637383234616433653936303931 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit: BPF prog-id=86 op=LOAD Oct 2 21:02:57.025000 audit[2381]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2252 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:57.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233643761383362666632616337366637383234616433653936303931 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.025000 audit: BPF prog-id=87 op=LOAD Oct 2 21:02:57.025000 audit[2381]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2252 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:57.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233643761383362666632616337366637383234616433653936303931 Oct 2 21:02:57.026000 audit: BPF prog-id=87 op=UNLOAD Oct 2 21:02:57.026000 audit: BPF prog-id=86 op=UNLOAD Oct 2 21:02:57.026000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.026000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.026000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.026000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.026000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.026000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.026000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.026000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.026000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.026000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:57.026000 audit: BPF prog-id=88 op=LOAD Oct 2 21:02:57.026000 audit[2381]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2252 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:57.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233643761383362666632616337366637383234616433653936303931 Oct 2 21:02:57.038522 env[1352]: time="2023-10-02T21:02:57.038476957Z" level=info msg="StartContainer for \"6fe5c8649da25af3895439cfd781f2d635fd0f60e93768982da7486baf441174\" returns successfully" Oct 2 21:02:57.075112 env[1352]: time="2023-10-02T21:02:57.074892709Z" level=info msg="StartContainer for \"b3d7a83bff2ac76f7824ad3e96091eb714d5cfddc315de36935a9382c1e09c3c\" returns successfully" Oct 2 21:02:58.333219 kubelet[2122]: I1002 21:02:58.333194 2122 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-9c05479676" Oct 2 21:02:58.667000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:02:58.667000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000285260 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:02:58.667000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:02:58.669000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:02:58.669000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400029d380 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:02:58.669000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:02:59.421707 kernel: kauditd_printk_skb: 626 callbacks suppressed Oct 2 21:02:59.421893 kernel: audit: type=1400 audit(1696280579.411:712): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:02:59.411000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:02:59.411000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=400b45c000 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:02:59.504181 kernel: audit: type=1300 audit(1696280579.411:712): arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=400b45c000 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:02:59.411000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:02:59.537234 kernel: audit: type=1327 audit(1696280579.411:712): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:02:59.420000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:02:59.591607 kernel: audit: type=1400 audit(1696280579.420:713): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:02:59.420000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40026cc0c0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:02:59.621357 kernel: audit: type=1300 audit(1696280579.420:713): arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40026cc0c0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:02:59.420000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:02:59.659617 kernel: audit: type=1327 audit(1696280579.420:713): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:02:59.659874 kernel: audit: type=1400 audit(1696280579.442:714): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:02:59.442000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:02:59.442000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400b45c2d0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:02:59.728059 kernel: audit: type=1300 audit(1696280579.442:714): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400b45c2d0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:02:59.442000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:02:59.759166 kernel: audit: type=1327 audit(1696280579.442:714): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:02:59.759313 kernel: audit: type=1400 audit(1696280579.672:715): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:02:59.672000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:02:59.672000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400b6c1ef0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:02:59.672000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:02:59.674000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:02:59.674000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4002b00ce0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:02:59.674000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:02:59.684000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:02:59.684000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400b868c90 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:02:59.684000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:02:59.973663 kubelet[2122]: E1002 21:02:59.973616 2122 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-9c05479676\" not found" node="ci-3510.3.0-a-9c05479676" Oct 2 21:03:00.019998 kubelet[2122]: I1002 21:03:00.019968 2122 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-9c05479676" Oct 2 21:03:00.020852 kubelet[2122]: E1002 21:03:00.020740 2122 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-9c05479676.178a6632244ec3c2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-9c05479676", UID:"ci-3510.3.0-a-9c05479676", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-9c05479676"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 201952706, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 201952706, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:03:00.090313 kubelet[2122]: E1002 21:03:00.090176 2122 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-9c05479676.178a6632247e8a4f", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-9c05479676", UID:"ci-3510.3.0-a-9c05479676", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-9c05479676"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 205083727, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 205083727, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:03:00.147241 kubelet[2122]: E1002 21:03:00.147145 2122 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-9c05479676.178a6632295ee2a4", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-9c05479676", UID:"ci-3510.3.0-a-9c05479676", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-9c05479676 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-9c05479676"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 286895268, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 286895268, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:03:00.201004 kubelet[2122]: E1002 21:03:00.200908 2122 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-9c05479676.178a6632295fef18", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-9c05479676", UID:"ci-3510.3.0-a-9c05479676", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ci-3510.3.0-a-9c05479676 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-9c05479676"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 286963992, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 286963992, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:03:00.204064 kubelet[2122]: I1002 21:03:00.204005 2122 apiserver.go:52] "Watching apiserver" Oct 2 21:03:00.211899 kubelet[2122]: I1002 21:03:00.211873 2122 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 21:03:00.256193 kubelet[2122]: E1002 21:03:00.256094 2122 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-9c05479676.178a6632295ffaf8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-9c05479676", UID:"ci-3510.3.0-a-9c05479676", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ci-3510.3.0-a-9c05479676 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-9c05479676"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 286967032, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 286967032, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:03:00.260713 kubelet[2122]: I1002 21:03:00.260679 2122 reconciler.go:41] "Reconciler: start to sync state" Oct 2 21:03:00.310625 kubelet[2122]: E1002 21:03:00.310455 2122 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-9c05479676.178a66322af262ac", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-9c05479676", UID:"ci-3510.3.0-a-9c05479676", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-9c05479676"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 313339052, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 313339052, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:03:00.366464 kubelet[2122]: E1002 21:03:00.366370 2122 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-9c05479676.178a6632295ee2a4", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-9c05479676", UID:"ci-3510.3.0-a-9c05479676", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-9c05479676 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-9c05479676"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 286895268, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 315445146, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:03:00.422567 kubelet[2122]: E1002 21:03:00.422455 2122 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-9c05479676.178a6632295fef18", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-9c05479676", UID:"ci-3510.3.0-a-9c05479676", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ci-3510.3.0-a-9c05479676 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-9c05479676"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 286963992, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 315458867, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:03:00.477319 kubelet[2122]: E1002 21:03:00.477214 2122 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-9c05479676.178a6632295ffaf8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-9c05479676", UID:"ci-3510.3.0-a-9c05479676", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ci-3510.3.0-a-9c05479676 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-9c05479676"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 286967032, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 315461587, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:03:00.678562 kubelet[2122]: E1002 21:03:00.678391 2122 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-9c05479676.178a6632295ee2a4", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-9c05479676", UID:"ci-3510.3.0-a-9c05479676", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-9c05479676 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-9c05479676"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 286895268, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 2, 55, 518495755, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:03:02.001906 systemd[1]: Reloading. Oct 2 21:03:02.124443 /usr/lib/systemd/system-generators/torcx-generator[2453]: time="2023-10-02T21:03:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:03:02.132760 /usr/lib/systemd/system-generators/torcx-generator[2453]: time="2023-10-02T21:03:02Z" level=info msg="torcx already run" Oct 2 21:03:02.281770 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:03:02.281947 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:03:02.297129 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:03:02.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.392000 audit: BPF prog-id=89 op=LOAD Oct 2 21:03:02.393000 audit: BPF prog-id=50 op=UNLOAD Oct 2 21:03:02.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.394000 audit: BPF prog-id=90 op=LOAD Oct 2 21:03:02.394000 audit: BPF prog-id=51 op=UNLOAD Oct 2 21:03:02.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.395000 audit: BPF prog-id=91 op=LOAD Oct 2 21:03:02.395000 audit: BPF prog-id=52 op=UNLOAD Oct 2 21:03:02.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.397000 audit: BPF prog-id=92 op=LOAD Oct 2 21:03:02.397000 audit: BPF prog-id=81 op=UNLOAD Oct 2 21:03:02.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.398000 audit: BPF prog-id=93 op=LOAD Oct 2 21:03:02.398000 audit: BPF prog-id=65 op=UNLOAD Oct 2 21:03:02.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.399000 audit: BPF prog-id=94 op=LOAD Oct 2 21:03:02.399000 audit: BPF prog-id=53 op=UNLOAD Oct 2 21:03:02.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.400000 audit: BPF prog-id=95 op=LOAD Oct 2 21:03:02.400000 audit: BPF prog-id=70 op=UNLOAD Oct 2 21:03:02.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.403000 audit: BPF prog-id=96 op=LOAD Oct 2 21:03:02.403000 audit: BPF prog-id=69 op=UNLOAD Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit: BPF prog-id=97 op=LOAD Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.405000 audit: BPF prog-id=98 op=LOAD Oct 2 21:03:02.405000 audit: BPF prog-id=54 op=UNLOAD Oct 2 21:03:02.405000 audit: BPF prog-id=55 op=UNLOAD Oct 2 21:03:02.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.406000 audit: BPF prog-id=99 op=LOAD Oct 2 21:03:02.406000 audit: BPF prog-id=85 op=UNLOAD Oct 2 21:03:02.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.407000 audit: BPF prog-id=100 op=LOAD Oct 2 21:03:02.408000 audit: BPF prog-id=56 op=UNLOAD Oct 2 21:03:02.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.409000 audit: BPF prog-id=101 op=LOAD Oct 2 21:03:02.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.410000 audit: BPF prog-id=102 op=LOAD Oct 2 21:03:02.410000 audit: BPF prog-id=57 op=UNLOAD Oct 2 21:03:02.410000 audit: BPF prog-id=58 op=UNLOAD Oct 2 21:03:02.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit: BPF prog-id=103 op=LOAD Oct 2 21:03:02.412000 audit: BPF prog-id=59 op=UNLOAD Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.413000 audit: BPF prog-id=104 op=LOAD Oct 2 21:03:02.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.413000 audit: BPF prog-id=105 op=LOAD Oct 2 21:03:02.413000 audit: BPF prog-id=60 op=UNLOAD Oct 2 21:03:02.413000 audit: BPF prog-id=61 op=UNLOAD Oct 2 21:03:02.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.415000 audit: BPF prog-id=106 op=LOAD Oct 2 21:03:02.415000 audit: BPF prog-id=77 op=UNLOAD Oct 2 21:03:02.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit: BPF prog-id=107 op=LOAD Oct 2 21:03:02.416000 audit: BPF prog-id=62 op=UNLOAD Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.416000 audit: BPF prog-id=108 op=LOAD Oct 2 21:03:02.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.417000 audit: BPF prog-id=109 op=LOAD Oct 2 21:03:02.417000 audit: BPF prog-id=63 op=UNLOAD Oct 2 21:03:02.417000 audit: BPF prog-id=64 op=UNLOAD Oct 2 21:03:02.439984 systemd[1]: Stopping kubelet.service... Oct 2 21:03:02.462978 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 21:03:02.463356 systemd[1]: Stopped kubelet.service. Oct 2 21:03:02.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:02.463584 systemd[1]: kubelet.service: Consumed 1.179s CPU time. Oct 2 21:03:02.466467 systemd[1]: Started kubelet.service. Oct 2 21:03:02.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:02.584641 kubelet[2513]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 21:03:02.594334 kubelet[2513]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:03:02.594334 kubelet[2513]: I1002 21:03:02.588746 2513 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 21:03:02.594334 kubelet[2513]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 21:03:02.594334 kubelet[2513]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:03:02.594000 audit[2523]: USER_ACCT pid=2523 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:02.595040 kubelet[2513]: I1002 21:03:02.595023 2513 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 21:03:02.595160 kubelet[2513]: I1002 21:03:02.595150 2513 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 21:03:02.595423 kubelet[2513]: I1002 21:03:02.595410 2513 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 21:03:02.596000 audit[2523]: CRED_REFR pid=2523 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:02.596796 sudo[2523]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 21:03:02.597037 sudo[2523]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 21:03:02.598508 kubelet[2513]: I1002 21:03:02.598490 2513 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 21:03:02.598000 audit[2523]: USER_START pid=2523 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:02.602771 kubelet[2513]: I1002 21:03:02.602751 2513 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 21:03:02.603565 kubelet[2513]: W1002 21:03:02.603548 2513 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:03:02.604388 kubelet[2513]: I1002 21:03:02.604372 2513 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 21:03:02.604817 kubelet[2513]: I1002 21:03:02.604803 2513 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 21:03:02.604959 kubelet[2513]: I1002 21:03:02.604948 2513 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 21:03:02.605110 kubelet[2513]: I1002 21:03:02.605099 2513 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 21:03:02.605271 kubelet[2513]: I1002 21:03:02.605261 2513 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 21:03:02.605415 kubelet[2513]: I1002 21:03:02.605393 2513 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:03:02.608876 kubelet[2513]: I1002 21:03:02.608859 2513 kubelet.go:398] "Attempting to sync node with API server" Oct 2 21:03:02.608969 kubelet[2513]: I1002 21:03:02.608959 2513 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 21:03:02.609087 kubelet[2513]: I1002 21:03:02.609078 2513 kubelet.go:297] "Adding apiserver pod source" Oct 2 21:03:02.609155 kubelet[2513]: I1002 21:03:02.609146 2513 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 21:03:02.631000 audit[2513]: AVC avc: denied { mac_admin } for pid=2513 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.634852 kubelet[2513]: I1002 21:03:02.630143 2513 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 21:03:02.634852 kubelet[2513]: I1002 21:03:02.630815 2513 server.go:1186] "Started kubelet" Oct 2 21:03:02.631000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:03:02.631000 audit[2513]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000af5e30 a1=4000699fb0 a2=4000af5e00 a3=25 items=0 ppid=1 pid=2513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:02.631000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:03:02.637000 audit[2513]: AVC avc: denied { mac_admin } for pid=2513 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.637000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:03:02.637000 audit[2513]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c48bc0 a1=4000699fc8 a2=4000af5ec0 a3=25 items=0 ppid=1 pid=2513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:02.637000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:03:02.637976 kubelet[2513]: I1002 21:03:02.637721 2513 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 21:03:02.637976 kubelet[2513]: I1002 21:03:02.637786 2513 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 21:03:02.637976 kubelet[2513]: I1002 21:03:02.637807 2513 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 21:03:02.647147 kubelet[2513]: E1002 21:03:02.647014 2513 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 21:03:02.647147 kubelet[2513]: E1002 21:03:02.647060 2513 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 21:03:02.648150 kubelet[2513]: I1002 21:03:02.648133 2513 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 21:03:02.660459 kubelet[2513]: I1002 21:03:02.660436 2513 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 21:03:02.661667 kubelet[2513]: I1002 21:03:02.661650 2513 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 21:03:02.661821 kubelet[2513]: I1002 21:03:02.661402 2513 server.go:451] "Adding debug handlers to kubelet server" Oct 2 21:03:02.732153 kubelet[2513]: I1002 21:03:02.732132 2513 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 21:03:02.732306 kubelet[2513]: I1002 21:03:02.732296 2513 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 21:03:02.732389 kubelet[2513]: I1002 21:03:02.732380 2513 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:03:02.732591 kubelet[2513]: I1002 21:03:02.732580 2513 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 21:03:02.732706 kubelet[2513]: I1002 21:03:02.732697 2513 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 21:03:02.732798 kubelet[2513]: I1002 21:03:02.732789 2513 policy_none.go:49] "None policy: Start" Oct 2 21:03:02.733532 kubelet[2513]: I1002 21:03:02.733518 2513 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 21:03:02.733643 kubelet[2513]: I1002 21:03:02.733633 2513 state_mem.go:35] "Initializing new in-memory state store" Oct 2 21:03:02.733844 kubelet[2513]: I1002 21:03:02.733834 2513 state_mem.go:75] "Updated machine memory state" Oct 2 21:03:02.737784 kubelet[2513]: I1002 21:03:02.737768 2513 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 21:03:02.737000 audit[2513]: AVC avc: denied { mac_admin } for pid=2513 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:02.737000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:03:02.737000 audit[2513]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400134ad20 a1=4001067770 a2=400134acf0 a3=25 items=0 ppid=1 pid=2513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:02.737000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:03:02.738139 kubelet[2513]: I1002 21:03:02.738126 2513 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 21:03:02.738387 kubelet[2513]: I1002 21:03:02.738374 2513 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 21:03:02.767353 kubelet[2513]: I1002 21:03:02.767329 2513 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-9c05479676" Oct 2 21:03:02.777031 kubelet[2513]: I1002 21:03:02.777003 2513 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-9c05479676" Oct 2 21:03:02.777243 kubelet[2513]: I1002 21:03:02.777219 2513 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-9c05479676" Oct 2 21:03:02.808775 kubelet[2513]: I1002 21:03:02.808748 2513 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 21:03:02.845455 kubelet[2513]: I1002 21:03:02.845369 2513 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 21:03:02.845632 kubelet[2513]: I1002 21:03:02.845620 2513 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 21:03:02.845779 kubelet[2513]: I1002 21:03:02.845770 2513 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 21:03:02.845880 kubelet[2513]: E1002 21:03:02.845872 2513 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 21:03:02.946356 kubelet[2513]: I1002 21:03:02.946325 2513 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:03:02.946695 kubelet[2513]: I1002 21:03:02.946680 2513 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:03:02.946797 kubelet[2513]: I1002 21:03:02.946786 2513 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:03:02.966539 kubelet[2513]: I1002 21:03:02.966509 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/c0698acdc067afb10476c71021aba93f-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-9c05479676\" (UID: \"c0698acdc067afb10476c71021aba93f\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" Oct 2 21:03:02.966811 kubelet[2513]: I1002 21:03:02.966783 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a702df7bee8664dc095179047dddc041-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-9c05479676\" (UID: \"a702df7bee8664dc095179047dddc041\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-9c05479676" Oct 2 21:03:02.966915 kubelet[2513]: I1002 21:03:02.966902 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a702df7bee8664dc095179047dddc041-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-9c05479676\" (UID: \"a702df7bee8664dc095179047dddc041\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-9c05479676" Oct 2 21:03:02.967036 kubelet[2513]: I1002 21:03:02.967024 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/c0698acdc067afb10476c71021aba93f-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-9c05479676\" (UID: \"c0698acdc067afb10476c71021aba93f\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" Oct 2 21:03:02.967131 kubelet[2513]: I1002 21:03:02.967122 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/c0698acdc067afb10476c71021aba93f-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-9c05479676\" (UID: \"c0698acdc067afb10476c71021aba93f\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" Oct 2 21:03:02.967235 kubelet[2513]: I1002 21:03:02.967226 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/c0698acdc067afb10476c71021aba93f-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-9c05479676\" (UID: \"c0698acdc067afb10476c71021aba93f\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" Oct 2 21:03:02.967339 kubelet[2513]: I1002 21:03:02.967330 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c0698acdc067afb10476c71021aba93f-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-9c05479676\" (UID: \"c0698acdc067afb10476c71021aba93f\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" Oct 2 21:03:02.967447 kubelet[2513]: I1002 21:03:02.967438 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/cb77dbfa78b9f958553368e23bdf4223-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-9c05479676\" (UID: \"cb77dbfa78b9f958553368e23bdf4223\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-9c05479676" Oct 2 21:03:02.967549 kubelet[2513]: I1002 21:03:02.967539 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a702df7bee8664dc095179047dddc041-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-9c05479676\" (UID: \"a702df7bee8664dc095179047dddc041\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-9c05479676" Oct 2 21:03:03.158816 sudo[2523]: pam_unix(sudo:session): session closed for user root Oct 2 21:03:03.158000 audit[2523]: USER_END pid=2523 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:03.158000 audit[2523]: CRED_DISP pid=2523 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:03.623388 kubelet[2513]: I1002 21:03:03.623355 2513 apiserver.go:52] "Watching apiserver" Oct 2 21:03:03.661974 kubelet[2513]: I1002 21:03:03.661923 2513 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 21:03:03.672157 kubelet[2513]: I1002 21:03:03.672117 2513 reconciler.go:41] "Reconciler: start to sync state" Oct 2 21:03:03.866133 kubelet[2513]: E1002 21:03:03.866055 2513 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-9c05479676\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-9c05479676" Oct 2 21:03:04.217171 kubelet[2513]: E1002 21:03:04.217113 2513 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.0-a-9c05479676\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" Oct 2 21:03:04.415002 kubelet[2513]: E1002 21:03:04.414966 2513 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-9c05479676\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-9c05479676" Oct 2 21:03:05.015946 kubelet[2513]: I1002 21:03:05.015916 2513 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-9c05479676" podStartSLOduration=3.01583449 pod.CreationTimestamp="2023-10-02 21:03:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:03:04.622521545 +0000 UTC m=+2.141044875" watchObservedRunningTime="2023-10-02 21:03:05.01583449 +0000 UTC m=+2.534357820" Oct 2 21:03:05.116109 sudo[1715]: pam_unix(sudo:session): session closed for user root Oct 2 21:03:05.115000 audit[1715]: USER_END pid=1715 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:05.121657 kernel: kauditd_printk_skb: 271 callbacks suppressed Oct 2 21:03:05.121758 kernel: audit: type=1106 audit(1696280585.115:972): pid=1715 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:05.115000 audit[1715]: CRED_DISP pid=1715 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:05.177077 kernel: audit: type=1104 audit(1696280585.115:973): pid=1715 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:05.201156 sshd[1712]: pam_unix(sshd:session): session closed for user core Oct 2 21:03:05.201000 audit[1712]: USER_END pid=1712 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:03:05.201000 audit[1712]: CRED_DISP pid=1712 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:03:05.230632 kernel: audit: type=1106 audit(1696280585.201:974): pid=1712 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:03:05.231029 systemd-logind[1337]: Session 9 logged out. Waiting for processes to exit. Oct 2 21:03:05.231862 systemd[1]: sshd@6-10.200.20.18:22-10.200.12.6:50318.service: Deactivated successfully. Oct 2 21:03:05.232572 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 21:03:05.232756 systemd[1]: session-9.scope: Consumed 8.342s CPU time. Oct 2 21:03:05.233792 systemd-logind[1337]: Removed session 9. Oct 2 21:03:05.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.18:22-10.200.12.6:50318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:05.290280 kernel: audit: type=1104 audit(1696280585.201:975): pid=1712 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:03:05.290392 kernel: audit: type=1131 audit(1696280585.230:976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.18:22-10.200.12.6:50318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:05.414162 kubelet[2513]: I1002 21:03:05.414124 2513 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-9c05479676" podStartSLOduration=3.414075279 pod.CreationTimestamp="2023-10-02 21:03:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:03:05.017065438 +0000 UTC m=+2.535588768" watchObservedRunningTime="2023-10-02 21:03:05.414075279 +0000 UTC m=+2.932598569" Oct 2 21:03:11.359187 kubelet[2513]: I1002 21:03:11.359154 2513 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-9c05479676" podStartSLOduration=9.359117125 pod.CreationTimestamp="2023-10-02 21:03:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:03:05.414256403 +0000 UTC m=+2.932779733" watchObservedRunningTime="2023-10-02 21:03:11.359117125 +0000 UTC m=+8.877640455" Oct 2 21:03:13.786000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:13.789000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:13.835943 kernel: audit: type=1400 audit(1696280593.786:977): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:13.836091 kernel: audit: type=1400 audit(1696280593.789:978): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:13.836121 kernel: audit: type=1300 audit(1696280593.789:978): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e66e40 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:03:13.789000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e66e40 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:03:13.789000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:13.908755 kernel: audit: type=1327 audit(1696280593.789:978): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:13.789000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:13.932282 kernel: audit: type=1400 audit(1696280593.789:979): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:13.932420 kernel: audit: type=1300 audit(1696280593.789:979): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e66e80 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:03:13.789000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e66e80 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:03:13.789000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:14.007419 kernel: audit: type=1327 audit(1696280593.789:979): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:14.007562 kernel: audit: type=1400 audit(1696280593.789:980): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:13.789000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:13.789000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e67100 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:03:14.063151 kernel: audit: type=1300 audit(1696280593.789:980): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e67100 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:03:13.789000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:14.101521 kernel: audit: type=1327 audit(1696280593.789:980): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:13.786000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d7c640 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:03:13.786000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:13.966000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 21:03:13.966000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a09780 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:03:13.966000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:15.553726 kubelet[2513]: I1002 21:03:15.553701 2513 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 21:03:15.554566 env[1352]: time="2023-10-02T21:03:15.554518254Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 21:03:15.554873 kubelet[2513]: I1002 21:03:15.554807 2513 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 21:03:15.757504 kubelet[2513]: I1002 21:03:15.757429 2513 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:03:15.764101 systemd[1]: Created slice kubepods-besteffort-pode2ab882f_536e_4cb6_898b_f4a43f2af747.slice. Oct 2 21:03:15.781425 kubelet[2513]: I1002 21:03:15.781371 2513 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:03:15.793934 systemd[1]: Created slice kubepods-burstable-podfcb0e641_2ff2_4819_a476_1102c29b81ac.slice. Oct 2 21:03:15.846526 kubelet[2513]: I1002 21:03:15.846366 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-etc-cni-netd\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.846526 kubelet[2513]: I1002 21:03:15.846446 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-hostproc\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.846526 kubelet[2513]: I1002 21:03:15.846490 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/e2ab882f-536e-4cb6-898b-f4a43f2af747-kube-proxy\") pod \"kube-proxy-vzwbg\" (UID: \"e2ab882f-536e-4cb6-898b-f4a43f2af747\") " pod="kube-system/kube-proxy-vzwbg" Oct 2 21:03:15.846526 kubelet[2513]: I1002 21:03:15.846514 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e2ab882f-536e-4cb6-898b-f4a43f2af747-lib-modules\") pod \"kube-proxy-vzwbg\" (UID: \"e2ab882f-536e-4cb6-898b-f4a43f2af747\") " pod="kube-system/kube-proxy-vzwbg" Oct 2 21:03:15.846797 kubelet[2513]: I1002 21:03:15.846538 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8xvxb\" (UniqueName: \"kubernetes.io/projected/fcb0e641-2ff2-4819-a476-1102c29b81ac-kube-api-access-8xvxb\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.846797 kubelet[2513]: I1002 21:03:15.846574 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-host-proc-sys-kernel\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.846797 kubelet[2513]: I1002 21:03:15.846616 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4gh25\" (UniqueName: \"kubernetes.io/projected/e2ab882f-536e-4cb6-898b-f4a43f2af747-kube-api-access-4gh25\") pod \"kube-proxy-vzwbg\" (UID: \"e2ab882f-536e-4cb6-898b-f4a43f2af747\") " pod="kube-system/kube-proxy-vzwbg" Oct 2 21:03:15.846797 kubelet[2513]: I1002 21:03:15.846638 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-cilium-run\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.846797 kubelet[2513]: I1002 21:03:15.846660 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/fcb0e641-2ff2-4819-a476-1102c29b81ac-clustermesh-secrets\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.846948 kubelet[2513]: I1002 21:03:15.846693 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/fcb0e641-2ff2-4819-a476-1102c29b81ac-hubble-tls\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.846948 kubelet[2513]: I1002 21:03:15.846720 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e2ab882f-536e-4cb6-898b-f4a43f2af747-xtables-lock\") pod \"kube-proxy-vzwbg\" (UID: \"e2ab882f-536e-4cb6-898b-f4a43f2af747\") " pod="kube-system/kube-proxy-vzwbg" Oct 2 21:03:15.846948 kubelet[2513]: I1002 21:03:15.846744 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/fcb0e641-2ff2-4819-a476-1102c29b81ac-cilium-config-path\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.846948 kubelet[2513]: I1002 21:03:15.846781 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-host-proc-sys-net\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.846948 kubelet[2513]: I1002 21:03:15.846804 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-cilium-cgroup\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.846948 kubelet[2513]: I1002 21:03:15.846834 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-cni-path\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.847108 kubelet[2513]: I1002 21:03:15.846873 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-xtables-lock\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.847108 kubelet[2513]: I1002 21:03:15.846896 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-bpf-maps\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.847108 kubelet[2513]: I1002 21:03:15.846919 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-lib-modules\") pod \"cilium-skj25\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " pod="kube-system/cilium-skj25" Oct 2 21:03:15.977658 kubelet[2513]: E1002 21:03:15.973695 2513 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 21:03:15.977658 kubelet[2513]: E1002 21:03:15.973730 2513 projected.go:198] Error preparing data for projected volume kube-api-access-4gh25 for pod kube-system/kube-proxy-vzwbg: configmap "kube-root-ca.crt" not found Oct 2 21:03:15.977658 kubelet[2513]: E1002 21:03:15.973793 2513 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/e2ab882f-536e-4cb6-898b-f4a43f2af747-kube-api-access-4gh25 podName:e2ab882f-536e-4cb6-898b-f4a43f2af747 nodeName:}" failed. No retries permitted until 2023-10-02 21:03:16.473767656 +0000 UTC m=+13.992290986 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-4gh25" (UniqueName: "kubernetes.io/projected/e2ab882f-536e-4cb6-898b-f4a43f2af747-kube-api-access-4gh25") pod "kube-proxy-vzwbg" (UID: "e2ab882f-536e-4cb6-898b-f4a43f2af747") : configmap "kube-root-ca.crt" not found Oct 2 21:03:15.984946 kubelet[2513]: E1002 21:03:15.984894 2513 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 21:03:15.984946 kubelet[2513]: E1002 21:03:15.984930 2513 projected.go:198] Error preparing data for projected volume kube-api-access-8xvxb for pod kube-system/cilium-skj25: configmap "kube-root-ca.crt" not found Oct 2 21:03:15.985153 kubelet[2513]: E1002 21:03:15.984982 2513 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/fcb0e641-2ff2-4819-a476-1102c29b81ac-kube-api-access-8xvxb podName:fcb0e641-2ff2-4819-a476-1102c29b81ac nodeName:}" failed. No retries permitted until 2023-10-02 21:03:16.484961914 +0000 UTC m=+14.003485244 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-8xvxb" (UniqueName: "kubernetes.io/projected/fcb0e641-2ff2-4819-a476-1102c29b81ac-kube-api-access-8xvxb") pod "cilium-skj25" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac") : configmap "kube-root-ca.crt" not found Oct 2 21:03:16.451812 kubelet[2513]: I1002 21:03:16.451760 2513 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:03:16.457280 systemd[1]: Created slice kubepods-besteffort-pod890a0174_f93a_4e12_9d05_ab0111cba452.slice. Oct 2 21:03:16.553036 kubelet[2513]: I1002 21:03:16.553001 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/890a0174-f93a-4e12-9d05-ab0111cba452-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-tnqph\" (UID: \"890a0174-f93a-4e12-9d05-ab0111cba452\") " pod="kube-system/cilium-operator-f59cbd8c6-tnqph" Oct 2 21:03:16.553273 kubelet[2513]: I1002 21:03:16.553260 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h5w95\" (UniqueName: \"kubernetes.io/projected/890a0174-f93a-4e12-9d05-ab0111cba452-kube-api-access-h5w95\") pod \"cilium-operator-f59cbd8c6-tnqph\" (UID: \"890a0174-f93a-4e12-9d05-ab0111cba452\") " pod="kube-system/cilium-operator-f59cbd8c6-tnqph" Oct 2 21:03:16.673849 env[1352]: time="2023-10-02T21:03:16.673350192Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-vzwbg,Uid:e2ab882f-536e-4cb6-898b-f4a43f2af747,Namespace:kube-system,Attempt:0,}" Oct 2 21:03:16.698044 env[1352]: time="2023-10-02T21:03:16.697997876Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-skj25,Uid:fcb0e641-2ff2-4819-a476-1102c29b81ac,Namespace:kube-system,Attempt:0,}" Oct 2 21:03:16.721219 env[1352]: time="2023-10-02T21:03:16.719697727Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:03:16.721219 env[1352]: time="2023-10-02T21:03:16.719737527Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:03:16.721219 env[1352]: time="2023-10-02T21:03:16.719747608Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:03:16.721219 env[1352]: time="2023-10-02T21:03:16.719920930Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c49b7a7fa8e27b4827e8c8deea923114114cb17218969cdf0a472e030e1a7f3f pid=2612 runtime=io.containerd.runc.v2 Oct 2 21:03:16.735902 systemd[1]: Started cri-containerd-c49b7a7fa8e27b4827e8c8deea923114114cb17218969cdf0a472e030e1a7f3f.scope. Oct 2 21:03:16.755750 env[1352]: time="2023-10-02T21:03:16.755659462Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:03:16.755928 env[1352]: time="2023-10-02T21:03:16.755719903Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:03:16.755928 env[1352]: time="2023-10-02T21:03:16.755731583Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:03:16.756177 env[1352]: time="2023-10-02T21:03:16.756144228Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56 pid=2640 runtime=io.containerd.runc.v2 Oct 2 21:03:16.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.760000 audit: BPF prog-id=110 op=LOAD Oct 2 21:03:16.761000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.761000 audit[2622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2612 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334396237613766613865323762343832376538633864656561393233 Oct 2 21:03:16.761000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.761000 audit[2622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2612 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334396237613766613865323762343832376538633864656561393233 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit: BPF prog-id=111 op=LOAD Oct 2 21:03:16.762000 audit[2622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2612 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334396237613766613865323762343832376538633864656561393233 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit: BPF prog-id=112 op=LOAD Oct 2 21:03:16.762000 audit[2622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2612 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334396237613766613865323762343832376538633864656561393233 Oct 2 21:03:16.762000 audit: BPF prog-id=112 op=UNLOAD Oct 2 21:03:16.762000 audit: BPF prog-id=111 op=UNLOAD Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.762000 audit: BPF prog-id=113 op=LOAD Oct 2 21:03:16.762000 audit[2622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2612 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334396237613766613865323762343832376538633864656561393233 Oct 2 21:03:16.763996 env[1352]: time="2023-10-02T21:03:16.763859277Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-tnqph,Uid:890a0174-f93a-4e12-9d05-ab0111cba452,Namespace:kube-system,Attempt:0,}" Oct 2 21:03:16.795993 systemd[1]: Started cri-containerd-87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56.scope. Oct 2 21:03:16.805813 env[1352]: time="2023-10-02T21:03:16.805761520Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-vzwbg,Uid:e2ab882f-536e-4cb6-898b-f4a43f2af747,Namespace:kube-system,Attempt:0,} returns sandbox id \"c49b7a7fa8e27b4827e8c8deea923114114cb17218969cdf0a472e030e1a7f3f\"" Oct 2 21:03:16.808834 env[1352]: time="2023-10-02T21:03:16.808776915Z" level=info msg="CreateContainer within sandbox \"c49b7a7fa8e27b4827e8c8deea923114114cb17218969cdf0a472e030e1a7f3f\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 21:03:16.817414 env[1352]: time="2023-10-02T21:03:16.817301814Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:03:16.817414 env[1352]: time="2023-10-02T21:03:16.817381534Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:03:16.817414 env[1352]: time="2023-10-02T21:03:16.817408015Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:03:16.817579 env[1352]: time="2023-10-02T21:03:16.817549736Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d pid=2682 runtime=io.containerd.runc.v2 Oct 2 21:03:16.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.826000 audit: BPF prog-id=114 op=LOAD Oct 2 21:03:16.827000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.827000 audit[2656]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2640 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837663830303234376130393137313561646666343766353936313737 Oct 2 21:03:16.827000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.827000 audit[2656]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2640 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837663830303234376130393137313561646666343766353936313737 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit: BPF prog-id=115 op=LOAD Oct 2 21:03:16.828000 audit[2656]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2640 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837663830303234376130393137313561646666343766353936313737 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit: BPF prog-id=116 op=LOAD Oct 2 21:03:16.828000 audit[2656]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2640 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837663830303234376130393137313561646666343766353936313737 Oct 2 21:03:16.828000 audit: BPF prog-id=116 op=UNLOAD Oct 2 21:03:16.828000 audit: BPF prog-id=115 op=UNLOAD Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.828000 audit: BPF prog-id=117 op=LOAD Oct 2 21:03:16.828000 audit[2656]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2640 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837663830303234376130393137313561646666343766353936313737 Oct 2 21:03:16.834048 systemd[1]: Started cri-containerd-5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d.scope. Oct 2 21:03:16.859186 env[1352]: time="2023-10-02T21:03:16.859077816Z" level=info msg="CreateContainer within sandbox \"c49b7a7fa8e27b4827e8c8deea923114114cb17218969cdf0a472e030e1a7f3f\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"cf184a762f90f0f26f6590b3ed4b73f44840350fded1b98eb7bf2bc6db78dba5\"" Oct 2 21:03:16.860046 env[1352]: time="2023-10-02T21:03:16.860005986Z" level=info msg="StartContainer for \"cf184a762f90f0f26f6590b3ed4b73f44840350fded1b98eb7bf2bc6db78dba5\"" Oct 2 21:03:16.864018 env[1352]: time="2023-10-02T21:03:16.863964632Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-skj25,Uid:fcb0e641-2ff2-4819-a476-1102c29b81ac,Namespace:kube-system,Attempt:0,} returns sandbox id \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\"" Oct 2 21:03:16.868580 env[1352]: time="2023-10-02T21:03:16.868537805Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 21:03:16.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.874000 audit: BPF prog-id=118 op=LOAD Oct 2 21:03:16.875000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.875000 audit[2697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2682 pid=2697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539313065616533346362396235323761616631316366343261623061 Oct 2 21:03:16.876000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.876000 audit[2697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2682 pid=2697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539313065616533346362396235323761616631316366343261623061 Oct 2 21:03:16.876000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.876000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.876000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.876000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.876000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.876000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.876000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.876000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.876000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.876000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.876000 audit: BPF prog-id=119 op=LOAD Oct 2 21:03:16.876000 audit[2697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2682 pid=2697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539313065616533346362396235323761616631316366343261623061 Oct 2 21:03:16.877000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.877000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.877000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.877000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.877000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.877000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.877000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.877000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.877000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.877000 audit: BPF prog-id=120 op=LOAD Oct 2 21:03:16.877000 audit[2697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2682 pid=2697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539313065616533346362396235323761616631316366343261623061 Oct 2 21:03:16.878000 audit: BPF prog-id=120 op=UNLOAD Oct 2 21:03:16.879000 audit: BPF prog-id=119 op=UNLOAD Oct 2 21:03:16.879000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.879000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.879000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.879000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.879000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.879000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.879000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.879000 audit[2697]: AVC avc: denied { perfmon } for pid=2697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.879000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.879000 audit[2697]: AVC avc: denied { bpf } for pid=2697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.879000 audit: BPF prog-id=121 op=LOAD Oct 2 21:03:16.879000 audit[2697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2682 pid=2697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539313065616533346362396235323761616631316366343261623061 Oct 2 21:03:16.906207 systemd[1]: Started cri-containerd-cf184a762f90f0f26f6590b3ed4b73f44840350fded1b98eb7bf2bc6db78dba5.scope. Oct 2 21:03:16.923560 env[1352]: time="2023-10-02T21:03:16.923521680Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-tnqph,Uid:890a0174-f93a-4e12-9d05-ab0111cba452,Namespace:kube-system,Attempt:0,} returns sandbox id \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\"" Oct 2 21:03:16.931000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.931000 audit[2730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2612 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366313834613736326639306630663236663635393062336564346237 Oct 2 21:03:16.931000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.931000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.931000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.931000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.931000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.931000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.931000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.931000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.931000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.931000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.931000 audit: BPF prog-id=122 op=LOAD Oct 2 21:03:16.931000 audit[2730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2612 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366313834613736326639306630663236663635393062336564346237 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit: BPF prog-id=123 op=LOAD Oct 2 21:03:16.932000 audit[2730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2612 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366313834613736326639306630663236663635393062336564346237 Oct 2 21:03:16.932000 audit: BPF prog-id=123 op=UNLOAD Oct 2 21:03:16.932000 audit: BPF prog-id=122 op=UNLOAD Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:16.932000 audit: BPF prog-id=124 op=LOAD Oct 2 21:03:16.932000 audit[2730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2612 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:16.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366313834613736326639306630663236663635393062336564346237 Oct 2 21:03:16.953346 env[1352]: time="2023-10-02T21:03:16.953273423Z" level=info msg="StartContainer for \"cf184a762f90f0f26f6590b3ed4b73f44840350fded1b98eb7bf2bc6db78dba5\" returns successfully" Oct 2 21:03:17.064000 audit[2788]: NETFILTER_CFG table=mangle:62 family=10 entries=1 op=nft_register_chain pid=2788 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.064000 audit[2788]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff68f4290 a2=0 a3=ffffb3fc36c0 items=0 ppid=2748 pid=2788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.064000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 21:03:17.072000 audit[2790]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=2790 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.072000 audit[2790]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff0909910 a2=0 a3=ffffa986e6c0 items=0 ppid=2748 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.072000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 21:03:17.073000 audit[2787]: NETFILTER_CFG table=mangle:64 family=2 entries=1 op=nft_register_chain pid=2787 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.073000 audit[2787]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff109fe10 a2=0 a3=ffff8bcf16c0 items=0 ppid=2748 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.073000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 21:03:17.078000 audit[2792]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2792 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.078000 audit[2792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdf4e4c60 a2=0 a3=ffffb254c6c0 items=0 ppid=2748 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.078000 audit[2791]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_chain pid=2791 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.078000 audit[2791]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc549020 a2=0 a3=ffff9db306c0 items=0 ppid=2748 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.078000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 21:03:17.078000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 21:03:17.083000 audit[2793]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_chain pid=2793 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.083000 audit[2793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd404a040 a2=0 a3=ffff898406c0 items=0 ppid=2748 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.083000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 21:03:17.164000 audit[2794]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2794 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.164000 audit[2794]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffcb35f520 a2=0 a3=ffff9ac766c0 items=0 ppid=2748 pid=2794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.164000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 21:03:17.173000 audit[2796]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2796 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.173000 audit[2796]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc7f0c370 a2=0 a3=ffff9ccd16c0 items=0 ppid=2748 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.173000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 21:03:17.186000 audit[2799]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_rule pid=2799 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.186000 audit[2799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffcbb09110 a2=0 a3=ffff8af646c0 items=0 ppid=2748 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.186000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 21:03:17.188000 audit[2800]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_chain pid=2800 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.188000 audit[2800]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff54cae20 a2=0 a3=ffffa9b9e6c0 items=0 ppid=2748 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.188000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 21:03:17.192000 audit[2802]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2802 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.192000 audit[2802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff77b3030 a2=0 a3=ffffaa16b6c0 items=0 ppid=2748 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.192000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 21:03:17.194000 audit[2803]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2803 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.194000 audit[2803]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffde787b00 a2=0 a3=ffff9d6846c0 items=0 ppid=2748 pid=2803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.194000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 21:03:17.197000 audit[2805]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2805 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.197000 audit[2805]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc0722b10 a2=0 a3=ffffad0726c0 items=0 ppid=2748 pid=2805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.197000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 21:03:17.204000 audit[2808]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_rule pid=2808 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.204000 audit[2808]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe9be1100 a2=0 a3=ffff8e52a6c0 items=0 ppid=2748 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.204000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 21:03:17.205000 audit[2809]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_chain pid=2809 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.205000 audit[2809]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee6fef40 a2=0 a3=ffff951266c0 items=0 ppid=2748 pid=2809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.205000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 21:03:17.209000 audit[2811]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2811 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.209000 audit[2811]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffb0ab450 a2=0 a3=ffff9452d6c0 items=0 ppid=2748 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.209000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 21:03:17.210000 audit[2812]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_chain pid=2812 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.210000 audit[2812]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc42266e0 a2=0 a3=ffff9baf66c0 items=0 ppid=2748 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.210000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 21:03:17.214000 audit[2814]: NETFILTER_CFG table=filter:79 family=2 entries=1 op=nft_register_rule pid=2814 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.214000 audit[2814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffffaa0890 a2=0 a3=ffff9049a6c0 items=0 ppid=2748 pid=2814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.214000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:03:17.219000 audit[2817]: NETFILTER_CFG table=filter:80 family=2 entries=1 op=nft_register_rule pid=2817 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.219000 audit[2817]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcf0b4ec0 a2=0 a3=ffffa64056c0 items=0 ppid=2748 pid=2817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.219000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:03:17.224000 audit[2820]: NETFILTER_CFG table=filter:81 family=2 entries=1 op=nft_register_rule pid=2820 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.224000 audit[2820]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd78ce8c0 a2=0 a3=ffff8c1ba6c0 items=0 ppid=2748 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.224000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 21:03:17.225000 audit[2821]: NETFILTER_CFG table=nat:82 family=2 entries=1 op=nft_register_chain pid=2821 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.225000 audit[2821]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe4932fd0 a2=0 a3=ffff82cfd6c0 items=0 ppid=2748 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.225000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 21:03:17.228000 audit[2823]: NETFILTER_CFG table=nat:83 family=2 entries=1 op=nft_register_rule pid=2823 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.228000 audit[2823]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffdc056020 a2=0 a3=ffff854246c0 items=0 ppid=2748 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.228000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:03:17.233000 audit[2826]: NETFILTER_CFG table=nat:84 family=2 entries=1 op=nft_register_rule pid=2826 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:17.233000 audit[2826]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe06135f0 a2=0 a3=ffffbee5b6c0 items=0 ppid=2748 pid=2826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.233000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:03:17.285000 audit[2830]: NETFILTER_CFG table=filter:85 family=2 entries=6 op=nft_register_rule pid=2830 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 21:03:17.285000 audit[2830]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffd2b0cd30 a2=0 a3=ffff9cd1f6c0 items=0 ppid=2748 pid=2830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.285000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:03:17.307000 audit[2830]: NETFILTER_CFG table=nat:86 family=2 entries=17 op=nft_register_chain pid=2830 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 21:03:17.307000 audit[2830]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffd2b0cd30 a2=0 a3=ffff9cd1f6c0 items=0 ppid=2748 pid=2830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.307000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:03:17.315000 audit[2834]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2834 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.315000 audit[2834]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdf9bf180 a2=0 a3=ffff94efb6c0 items=0 ppid=2748 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.315000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 21:03:17.320000 audit[2836]: NETFILTER_CFG table=filter:88 family=10 entries=2 op=nft_register_chain pid=2836 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.320000 audit[2836]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe5802860 a2=0 a3=ffffb350b6c0 items=0 ppid=2748 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.320000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 21:03:17.326000 audit[2839]: NETFILTER_CFG table=filter:89 family=10 entries=2 op=nft_register_chain pid=2839 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.326000 audit[2839]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd1f72c20 a2=0 a3=ffffb503e6c0 items=0 ppid=2748 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.326000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 21:03:17.327000 audit[2840]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_chain pid=2840 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.327000 audit[2840]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5a40e60 a2=0 a3=ffffb39da6c0 items=0 ppid=2748 pid=2840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.327000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 21:03:17.331000 audit[2842]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.331000 audit[2842]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc7bebef0 a2=0 a3=ffffb244a6c0 items=0 ppid=2748 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.331000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 21:03:17.333000 audit[2843]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2843 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.333000 audit[2843]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc6dded0 a2=0 a3=ffffbef076c0 items=0 ppid=2748 pid=2843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.333000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 21:03:17.336000 audit[2845]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2845 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.336000 audit[2845]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd15b9580 a2=0 a3=ffffbec0a6c0 items=0 ppid=2748 pid=2845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.336000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 21:03:17.341000 audit[2848]: NETFILTER_CFG table=filter:94 family=10 entries=2 op=nft_register_chain pid=2848 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.341000 audit[2848]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffffa628fc0 a2=0 a3=ffffb45656c0 items=0 ppid=2748 pid=2848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.341000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 21:03:17.342000 audit[2849]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_chain pid=2849 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.342000 audit[2849]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff4db3b60 a2=0 a3=ffff887696c0 items=0 ppid=2748 pid=2849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.342000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 21:03:17.347000 audit[2851]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2851 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.347000 audit[2851]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdb8ee140 a2=0 a3=ffff8955a6c0 items=0 ppid=2748 pid=2851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.347000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 21:03:17.349000 audit[2852]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_chain pid=2852 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.349000 audit[2852]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe40508d0 a2=0 a3=ffff8a9456c0 items=0 ppid=2748 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.349000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 21:03:17.355000 audit[2854]: NETFILTER_CFG table=filter:98 family=10 entries=1 op=nft_register_rule pid=2854 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.355000 audit[2854]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdff5f780 a2=0 a3=ffffbc2816c0 items=0 ppid=2748 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.355000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:03:17.368000 audit[2857]: NETFILTER_CFG table=filter:99 family=10 entries=1 op=nft_register_rule pid=2857 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.368000 audit[2857]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdd5b3d70 a2=0 a3=ffff96dbe6c0 items=0 ppid=2748 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.368000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 21:03:17.377000 audit[2860]: NETFILTER_CFG table=filter:100 family=10 entries=1 op=nft_register_rule pid=2860 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.377000 audit[2860]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffef30c90 a2=0 a3=ffffb35456c0 items=0 ppid=2748 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.377000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 21:03:17.381000 audit[2861]: NETFILTER_CFG table=nat:101 family=10 entries=1 op=nft_register_chain pid=2861 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.381000 audit[2861]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc5d17f40 a2=0 a3=ffffaf90d6c0 items=0 ppid=2748 pid=2861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.381000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 21:03:17.390000 audit[2863]: NETFILTER_CFG table=nat:102 family=10 entries=2 op=nft_register_chain pid=2863 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.390000 audit[2863]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff95c7d00 a2=0 a3=ffffb1a776c0 items=0 ppid=2748 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.390000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:03:17.397000 audit[2866]: NETFILTER_CFG table=nat:103 family=10 entries=2 op=nft_register_chain pid=2866 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:17.397000 audit[2866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff3b557b0 a2=0 a3=ffff9f5536c0 items=0 ppid=2748 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.397000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:03:17.405000 audit[2870]: NETFILTER_CFG table=filter:104 family=10 entries=3 op=nft_register_rule pid=2870 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 21:03:17.405000 audit[2870]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffffd5bb20 a2=0 a3=ffff984dc6c0 items=0 ppid=2748 pid=2870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.405000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:03:17.407000 audit[2870]: NETFILTER_CFG table=nat:105 family=10 entries=10 op=nft_register_chain pid=2870 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 21:03:17.407000 audit[2870]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffffd5bb20 a2=0 a3=ffff984dc6c0 items=0 ppid=2748 pid=2870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:17.407000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:03:22.872330 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4130805456.mount: Deactivated successfully. Oct 2 21:03:25.089742 env[1352]: time="2023-10-02T21:03:25.089682300Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:25.096430 env[1352]: time="2023-10-02T21:03:25.096395149Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:25.100803 env[1352]: time="2023-10-02T21:03:25.100755558Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:25.101436 env[1352]: time="2023-10-02T21:03:25.101408187Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 21:03:25.102365 env[1352]: time="2023-10-02T21:03:25.102328332Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 21:03:25.104652 env[1352]: time="2023-10-02T21:03:25.104585934Z" level=info msg="CreateContainer within sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 21:03:25.131170 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3908403909.mount: Deactivated successfully. Oct 2 21:03:25.135727 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2010973673.mount: Deactivated successfully. Oct 2 21:03:25.146557 env[1352]: time="2023-10-02T21:03:25.146513443Z" level=info msg="CreateContainer within sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a\"" Oct 2 21:03:25.147443 env[1352]: time="2023-10-02T21:03:25.147417308Z" level=info msg="StartContainer for \"49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a\"" Oct 2 21:03:25.186469 systemd[1]: Started cri-containerd-49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a.scope. Oct 2 21:03:25.201939 systemd[1]: cri-containerd-49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a.scope: Deactivated successfully. Oct 2 21:03:26.129279 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a-rootfs.mount: Deactivated successfully. Oct 2 21:03:26.942614 env[1352]: time="2023-10-02T21:03:26.942467751Z" level=info msg="shim disconnected" id=49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a Oct 2 21:03:26.942614 env[1352]: time="2023-10-02T21:03:26.942523660Z" level=warning msg="cleaning up after shim disconnected" id=49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a namespace=k8s.io Oct 2 21:03:26.942614 env[1352]: time="2023-10-02T21:03:26.942534297Z" level=info msg="cleaning up dead shim" Oct 2 21:03:26.965493 env[1352]: time="2023-10-02T21:03:26.965407734Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:03:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2899 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:03:26Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:03:26.965889 env[1352]: time="2023-10-02T21:03:26.965775098Z" level=error msg="copy shim log" error="read /proc/self/fd/53: file already closed" Oct 2 21:03:26.967292 env[1352]: time="2023-10-02T21:03:26.967237596Z" level=error msg="Failed to pipe stdout of container \"49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a\"" error="reading from a closed fifo" Oct 2 21:03:26.967458 env[1352]: time="2023-10-02T21:03:26.967428236Z" level=error msg="Failed to pipe stderr of container \"49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a\"" error="reading from a closed fifo" Oct 2 21:03:26.979637 env[1352]: time="2023-10-02T21:03:26.973473108Z" level=error msg="StartContainer for \"49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:03:26.979792 kubelet[2513]: E1002 21:03:26.974355 2513 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a" Oct 2 21:03:26.979792 kubelet[2513]: E1002 21:03:26.974480 2513 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:03:26.979792 kubelet[2513]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:03:26.979792 kubelet[2513]: rm /hostbin/cilium-mount Oct 2 21:03:26.980181 kubelet[2513]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8xvxb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:03:26.980264 kubelet[2513]: E1002 21:03:26.974555 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:03:27.908990 env[1352]: time="2023-10-02T21:03:27.908940804Z" level=info msg="CreateContainer within sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 21:03:27.922983 kubelet[2513]: I1002 21:03:27.922934 2513 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-vzwbg" podStartSLOduration=12.92136167 pod.CreationTimestamp="2023-10-02 21:03:15 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:03:17.895320811 +0000 UTC m=+15.413844141" watchObservedRunningTime="2023-10-02 21:03:27.92136167 +0000 UTC m=+25.439885000" Oct 2 21:03:27.950626 env[1352]: time="2023-10-02T21:03:27.948751411Z" level=info msg="CreateContainer within sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b\"" Oct 2 21:03:27.951854 env[1352]: time="2023-10-02T21:03:27.951821114Z" level=info msg="StartContainer for \"9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b\"" Oct 2 21:03:28.001009 systemd[1]: Started cri-containerd-9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b.scope. Oct 2 21:03:28.019225 systemd[1]: cri-containerd-9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b.scope: Deactivated successfully. Oct 2 21:03:28.024290 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b-rootfs.mount: Deactivated successfully. Oct 2 21:03:28.075913 env[1352]: time="2023-10-02T21:03:28.075806433Z" level=info msg="shim disconnected" id=9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b Oct 2 21:03:28.075913 env[1352]: time="2023-10-02T21:03:28.075899054Z" level=warning msg="cleaning up after shim disconnected" id=9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b namespace=k8s.io Oct 2 21:03:28.075913 env[1352]: time="2023-10-02T21:03:28.075908733Z" level=info msg="cleaning up dead shim" Oct 2 21:03:28.101525 env[1352]: time="2023-10-02T21:03:28.101463024Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:03:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2937 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:03:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:03:28.101794 env[1352]: time="2023-10-02T21:03:28.101732971Z" level=error msg="copy shim log" error="read /proc/self/fd/60: file already closed" Oct 2 21:03:28.101999 env[1352]: time="2023-10-02T21:03:28.101964606Z" level=error msg="Failed to pipe stderr of container \"9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b\"" error="reading from a closed fifo" Oct 2 21:03:28.102297 env[1352]: time="2023-10-02T21:03:28.102078064Z" level=error msg="Failed to pipe stdout of container \"9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b\"" error="reading from a closed fifo" Oct 2 21:03:28.108197 env[1352]: time="2023-10-02T21:03:28.108152638Z" level=error msg="StartContainer for \"9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:03:28.108625 kubelet[2513]: E1002 21:03:28.108471 2513 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b" Oct 2 21:03:28.108625 kubelet[2513]: E1002 21:03:28.108568 2513 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:03:28.108625 kubelet[2513]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:03:28.108625 kubelet[2513]: rm /hostbin/cilium-mount Oct 2 21:03:28.108970 kubelet[2513]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8xvxb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:03:28.109770 kubelet[2513]: E1002 21:03:28.109179 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:03:28.681035 env[1352]: time="2023-10-02T21:03:28.680987325Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:28.687489 env[1352]: time="2023-10-02T21:03:28.687427508Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:28.692025 env[1352]: time="2023-10-02T21:03:28.691988978Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:28.692441 env[1352]: time="2023-10-02T21:03:28.692359745Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 21:03:28.696261 env[1352]: time="2023-10-02T21:03:28.696218472Z" level=info msg="CreateContainer within sandbox \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 21:03:28.725556 env[1352]: time="2023-10-02T21:03:28.725508154Z" level=info msg="CreateContainer within sandbox \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\"" Oct 2 21:03:28.726912 env[1352]: time="2023-10-02T21:03:28.726884805Z" level=info msg="StartContainer for \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\"" Oct 2 21:03:28.752795 systemd[1]: Started cri-containerd-611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae.scope. Oct 2 21:03:28.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.799547 kernel: kauditd_printk_skb: 351 callbacks suppressed Oct 2 21:03:28.799706 kernel: audit: type=1400 audit(1696280608.791:1086): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.842583 kernel: audit: type=1400 audit(1696280608.791:1087): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.894390 kernel: audit: type=1400 audit(1696280608.791:1088): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.894522 kernel: audit: type=1400 audit(1696280608.791:1089): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.916181 kernel: audit: type=1400 audit(1696280608.791:1090): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.922642 kernel: audit: type=1400 audit(1696280608.791:1091): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.961728 kernel: audit: type=1400 audit(1696280608.791:1092): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.996933 kernel: audit: type=1400 audit(1696280608.791:1093): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.998014 env[1352]: time="2023-10-02T21:03:28.997974961Z" level=info msg="StartContainer for \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\" returns successfully" Oct 2 21:03:28.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.022227 kernel: audit: type=1400 audit(1696280608.791:1094): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.024765 kubelet[2513]: I1002 21:03:29.024746 2513 scope.go:115] "RemoveContainer" containerID="49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a" Oct 2 21:03:29.025331 kubelet[2513]: I1002 21:03:29.025317 2513 scope.go:115] "RemoveContainer" containerID="49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a" Oct 2 21:03:29.026571 env[1352]: time="2023-10-02T21:03:29.026538108Z" level=info msg="RemoveContainer for \"49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a\"" Oct 2 21:03:29.028042 env[1352]: time="2023-10-02T21:03:29.028013748Z" level=info msg="RemoveContainer for \"49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a\"" Oct 2 21:03:29.028262 env[1352]: time="2023-10-02T21:03:29.028230827Z" level=error msg="RemoveContainer for \"49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a\" failed" error="failed to set removing state for container \"49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a\": container is already in removing state" Oct 2 21:03:29.028463 kubelet[2513]: E1002 21:03:29.028447 2513 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a\": container is already in removing state" containerID="49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a" Oct 2 21:03:29.028580 kubelet[2513]: E1002 21:03:29.028570 2513 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a": container is already in removing state; Skipping pod "cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)" Oct 2 21:03:29.028954 kubelet[2513]: E1002 21:03:29.028940 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:03:29.042364 kernel: audit: type=1400 audit(1696280608.791:1095): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.791000 audit: BPF prog-id=125 op=LOAD Oct 2 21:03:28.798000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.798000 audit[2958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2682 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:28.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631316263353531666435346161363963376161383762346461373966 Oct 2 21:03:28.798000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.798000 audit[2958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2682 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:28.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631316263353531666435346161363963376161383762346461373966 Oct 2 21:03:28.798000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.798000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.798000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.798000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.798000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.798000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.798000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.798000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.798000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.798000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.798000 audit: BPF prog-id=126 op=LOAD Oct 2 21:03:28.798000 audit[2958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2682 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:28.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631316263353531666435346161363963376161383762346461373966 Oct 2 21:03:28.822000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.822000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.822000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.822000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.822000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.822000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.822000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.822000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.822000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.822000 audit: BPF prog-id=127 op=LOAD Oct 2 21:03:28.822000 audit[2958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2682 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:28.822000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631316263353531666435346161363963376161383762346461373966 Oct 2 21:03:28.841000 audit: BPF prog-id=127 op=UNLOAD Oct 2 21:03:28.841000 audit: BPF prog-id=126 op=UNLOAD Oct 2 21:03:28.841000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.841000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.841000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.841000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.841000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.841000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.841000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.841000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.841000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.841000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:28.841000 audit: BPF prog-id=128 op=LOAD Oct 2 21:03:28.841000 audit[2958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2682 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:28.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631316263353531666435346161363963376161383762346461373966 Oct 2 21:03:29.052202 env[1352]: time="2023-10-02T21:03:29.052155005Z" level=info msg="RemoveContainer for \"49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a\" returns successfully" Oct 2 21:03:29.057000 audit[2968]: AVC avc: denied { map_create } for pid=2968 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c433,c1004 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c433,c1004 tclass=bpf permissive=0 Oct 2 21:03:29.057000 audit[2968]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400061f768 a2=48 a3=0 items=0 ppid=2682 pid=2968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c433,c1004 key=(null) Oct 2 21:03:29.057000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 21:03:30.030131 kubelet[2513]: E1002 21:03:30.030094 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:03:30.048023 kubelet[2513]: W1002 21:03:30.047976 2513 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfcb0e641_2ff2_4819_a476_1102c29b81ac.slice/cri-containerd-49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a.scope WatchSource:0}: container "49cf57f21b140d941916f88da5c873b67e23f72c0994ddc321d259a9f3d73c0a" in namespace "k8s.io": not found Oct 2 21:03:30.055857 kubelet[2513]: I1002 21:03:30.055760 2513 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-tnqph" podStartSLOduration=-9.223372022799055e+09 pod.CreationTimestamp="2023-10-02 21:03:16 +0000 UTC" firstStartedPulling="2023-10-02 21:03:16.924787974 +0000 UTC m=+14.443311264" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:03:30.039496089 +0000 UTC m=+27.558019419" watchObservedRunningTime="2023-10-02 21:03:30.055719974 +0000 UTC m=+27.574243264" Oct 2 21:03:33.155226 kubelet[2513]: W1002 21:03:33.155169 2513 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfcb0e641_2ff2_4819_a476_1102c29b81ac.slice/cri-containerd-9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b.scope WatchSource:0}: task 9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b not found: not found Oct 2 21:03:40.851260 env[1352]: time="2023-10-02T21:03:40.850008139Z" level=info msg="CreateContainer within sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 21:03:40.875063 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount67962562.mount: Deactivated successfully. Oct 2 21:03:40.879500 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1481151019.mount: Deactivated successfully. Oct 2 21:03:40.889826 env[1352]: time="2023-10-02T21:03:40.889778426Z" level=info msg="CreateContainer within sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28\"" Oct 2 21:03:40.890571 env[1352]: time="2023-10-02T21:03:40.890544358Z" level=info msg="StartContainer for \"0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28\"" Oct 2 21:03:40.918674 systemd[1]: Started cri-containerd-0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28.scope. Oct 2 21:03:40.933681 systemd[1]: cri-containerd-0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28.scope: Deactivated successfully. Oct 2 21:03:41.276810 env[1352]: time="2023-10-02T21:03:41.276757455Z" level=info msg="shim disconnected" id=0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28 Oct 2 21:03:41.277275 env[1352]: time="2023-10-02T21:03:41.277242469Z" level=warning msg="cleaning up after shim disconnected" id=0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28 namespace=k8s.io Oct 2 21:03:41.277368 env[1352]: time="2023-10-02T21:03:41.277352854Z" level=info msg="cleaning up dead shim" Oct 2 21:03:41.297108 env[1352]: time="2023-10-02T21:03:41.297060755Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:03:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3012 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:03:41Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:03:41.297522 env[1352]: time="2023-10-02T21:03:41.297466939Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 21:03:41.299685 env[1352]: time="2023-10-02T21:03:41.299643561Z" level=error msg="Failed to pipe stderr of container \"0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28\"" error="reading from a closed fifo" Oct 2 21:03:41.299925 env[1352]: time="2023-10-02T21:03:41.299883888Z" level=error msg="Failed to pipe stdout of container \"0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28\"" error="reading from a closed fifo" Oct 2 21:03:41.305082 env[1352]: time="2023-10-02T21:03:41.305026024Z" level=error msg="StartContainer for \"0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:03:41.306849 kubelet[2513]: E1002 21:03:41.305300 2513 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28" Oct 2 21:03:41.306849 kubelet[2513]: E1002 21:03:41.305408 2513 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:03:41.306849 kubelet[2513]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:03:41.306849 kubelet[2513]: rm /hostbin/cilium-mount Oct 2 21:03:41.307262 kubelet[2513]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8xvxb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:03:41.307325 kubelet[2513]: E1002 21:03:41.305444 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:03:41.872918 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28-rootfs.mount: Deactivated successfully. Oct 2 21:03:42.050672 kubelet[2513]: I1002 21:03:42.050638 2513 scope.go:115] "RemoveContainer" containerID="9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b" Oct 2 21:03:42.051185 kubelet[2513]: I1002 21:03:42.051121 2513 scope.go:115] "RemoveContainer" containerID="9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b" Oct 2 21:03:42.053912 env[1352]: time="2023-10-02T21:03:42.053502540Z" level=info msg="RemoveContainer for \"9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b\"" Oct 2 21:03:42.054957 env[1352]: time="2023-10-02T21:03:42.054921470Z" level=info msg="RemoveContainer for \"9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b\"" Oct 2 21:03:42.055046 env[1352]: time="2023-10-02T21:03:42.055016898Z" level=error msg="RemoveContainer for \"9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b\" failed" error="failed to set removing state for container \"9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b\": container is already in removing state" Oct 2 21:03:42.055230 kubelet[2513]: E1002 21:03:42.055208 2513 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b\": container is already in removing state" containerID="9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b" Oct 2 21:03:42.055280 kubelet[2513]: E1002 21:03:42.055248 2513 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b": container is already in removing state; Skipping pod "cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)" Oct 2 21:03:42.055571 kubelet[2513]: E1002 21:03:42.055550 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:03:42.064138 env[1352]: time="2023-10-02T21:03:42.064071850Z" level=info msg="RemoveContainer for \"9cf9788676f01f9e1cd640a5e5107137ef92814206e54d80f9c2e9effc9b2a3b\" returns successfully" Oct 2 21:03:44.382512 kubelet[2513]: W1002 21:03:44.382462 2513 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfcb0e641_2ff2_4819_a476_1102c29b81ac.slice/cri-containerd-0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28.scope WatchSource:0}: task 0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28 not found: not found Oct 2 21:03:45.276894 update_engine[1340]: I1002 21:03:45.276803 1340 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 21:03:45.276894 update_engine[1340]: I1002 21:03:45.276886 1340 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 21:03:45.277286 update_engine[1340]: I1002 21:03:45.277236 1340 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 21:03:45.277755 update_engine[1340]: I1002 21:03:45.277716 1340 omaha_request_params.cc:62] Current group set to lts Oct 2 21:03:45.277970 update_engine[1340]: I1002 21:03:45.277933 1340 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 21:03:45.277970 update_engine[1340]: I1002 21:03:45.277952 1340 update_attempter.cc:638] Scheduling an action processor start. Oct 2 21:03:45.277970 update_engine[1340]: I1002 21:03:45.277969 1340 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 21:03:45.278085 update_engine[1340]: I1002 21:03:45.277992 1340 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 21:03:45.278443 locksmithd[1429]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 21:03:45.278846 update_engine[1340]: I1002 21:03:45.278784 1340 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 21:03:45.278846 update_engine[1340]: I1002 21:03:45.278813 1340 omaha_request_action.cc:269] Request: Oct 2 21:03:45.278846 update_engine[1340]: Oct 2 21:03:45.278846 update_engine[1340]: Oct 2 21:03:45.278846 update_engine[1340]: Oct 2 21:03:45.278846 update_engine[1340]: Oct 2 21:03:45.278846 update_engine[1340]: Oct 2 21:03:45.278846 update_engine[1340]: Oct 2 21:03:45.278846 update_engine[1340]: Oct 2 21:03:45.278846 update_engine[1340]: Oct 2 21:03:45.278846 update_engine[1340]: I1002 21:03:45.278820 1340 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 21:03:45.283983 update_engine[1340]: I1002 21:03:45.283946 1340 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 21:03:45.284203 update_engine[1340]: I1002 21:03:45.284171 1340 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 21:03:46.467752 update_engine[1340]: I1002 21:03:46.467718 1340 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 21:03:46.470813 update_engine[1340]: I1002 21:03:46.470785 1340 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 21:03:46.471132 update_engine[1340]: I1002 21:03:46.471119 1340 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 21:03:46.855919 update_engine[1340]: I1002 21:03:46.855888 1340 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 21:03:46.860020 update_engine[1340]: I1002 21:03:46.859985 1340 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 21:03:46.860259 update_engine[1340]: I1002 21:03:46.860246 1340 omaha_request_action.cc:619] Omaha request response: Oct 2 21:03:46.860259 update_engine[1340]: Oct 2 21:03:47.042812 update_engine[1340]: I1002 21:03:47.042778 1340 omaha_request_action.cc:409] No update. Oct 2 21:03:47.042991 update_engine[1340]: I1002 21:03:47.042979 1340 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 21:03:47.043056 update_engine[1340]: I1002 21:03:47.043046 1340 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 21:03:47.043120 update_engine[1340]: I1002 21:03:47.043104 1340 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 21:03:47.043179 update_engine[1340]: I1002 21:03:47.043169 1340 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 21:03:47.043227 update_engine[1340]: I1002 21:03:47.043217 1340 update_attempter.cc:302] Processing Done. Oct 2 21:03:47.043356 update_engine[1340]: I1002 21:03:47.043345 1340 update_attempter.cc:338] No update. Oct 2 21:03:47.043450 update_engine[1340]: I1002 21:03:47.043437 1340 update_check_scheduler.cc:74] Next update check in 45m29s Oct 2 21:03:47.043873 locksmithd[1429]: LastCheckedTime=1696280627 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 21:03:54.847396 kubelet[2513]: E1002 21:03:54.847334 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:03:58.668000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:58.680499 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 21:03:58.680702 kernel: audit: type=1400 audit(1696280638.668:1105): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:58.668000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e36630 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:03:58.737293 kernel: audit: type=1300 audit(1696280638.668:1105): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e36630 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:03:58.668000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:58.782722 kernel: audit: type=1327 audit(1696280638.668:1105): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:58.669000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:58.805417 kernel: audit: type=1400 audit(1696280638.669:1106): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:58.669000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d7d120 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:03:58.837050 kernel: audit: type=1300 audit(1696280638.669:1106): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d7d120 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:03:58.669000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:58.870246 kernel: audit: type=1327 audit(1696280638.669:1106): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:59.420000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:59.420000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40055f85a0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:03:59.494578 kernel: audit: type=1400 audit(1696280639.420:1107): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:59.494724 kernel: audit: type=1300 audit(1696280639.420:1107): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40055f85a0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:03:59.494814 kernel: audit: type=1327 audit(1696280639.420:1107): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:03:59.420000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:03:59.423000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:59.552279 kernel: audit: type=1400 audit(1696280639.423:1108): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:59.423000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4002b324a0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:03:59.423000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:03:59.443000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:59.443000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40054601b0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:03:59.443000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:03:59.673000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:59.673000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40055f9b60 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:03:59.673000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:03:59.674000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:59.674000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4002b32780 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:03:59.674000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:03:59.685000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:59.685000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40055f9b90 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:03:59.685000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:07.851113 env[1352]: time="2023-10-02T21:04:07.850361333Z" level=info msg="CreateContainer within sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 21:04:07.874349 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1046419664.mount: Deactivated successfully. Oct 2 21:04:07.881710 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2410667071.mount: Deactivated successfully. Oct 2 21:04:07.892088 env[1352]: time="2023-10-02T21:04:07.892041575Z" level=info msg="CreateContainer within sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e\"" Oct 2 21:04:07.892617 env[1352]: time="2023-10-02T21:04:07.892541578Z" level=info msg="StartContainer for \"728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e\"" Oct 2 21:04:07.915432 systemd[1]: Started cri-containerd-728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e.scope. Oct 2 21:04:07.931939 systemd[1]: cri-containerd-728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e.scope: Deactivated successfully. Oct 2 21:04:07.971466 env[1352]: time="2023-10-02T21:04:07.971404471Z" level=info msg="shim disconnected" id=728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e Oct 2 21:04:07.972028 env[1352]: time="2023-10-02T21:04:07.972009067Z" level=warning msg="cleaning up after shim disconnected" id=728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e namespace=k8s.io Oct 2 21:04:07.972125 env[1352]: time="2023-10-02T21:04:07.972107659Z" level=info msg="cleaning up dead shim" Oct 2 21:04:07.995658 env[1352]: time="2023-10-02T21:04:07.995579189Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:04:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3053 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:04:07Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:04:07.996114 env[1352]: time="2023-10-02T21:04:07.996057474Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 21:04:07.997692 env[1352]: time="2023-10-02T21:04:07.997640039Z" level=error msg="Failed to pipe stdout of container \"728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e\"" error="reading from a closed fifo" Oct 2 21:04:07.998721 env[1352]: time="2023-10-02T21:04:07.998683403Z" level=error msg="Failed to pipe stderr of container \"728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e\"" error="reading from a closed fifo" Oct 2 21:04:08.012505 env[1352]: time="2023-10-02T21:04:08.012437499Z" level=error msg="StartContainer for \"728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:04:08.013361 kubelet[2513]: E1002 21:04:08.012874 2513 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e" Oct 2 21:04:08.013361 kubelet[2513]: E1002 21:04:08.013297 2513 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:04:08.013361 kubelet[2513]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:04:08.013361 kubelet[2513]: rm /hostbin/cilium-mount Oct 2 21:04:08.013751 kubelet[2513]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8xvxb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:04:08.013810 kubelet[2513]: E1002 21:04:08.013340 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:04:08.096340 kubelet[2513]: I1002 21:04:08.096307 2513 scope.go:115] "RemoveContainer" containerID="0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28" Oct 2 21:04:08.096794 kubelet[2513]: I1002 21:04:08.096758 2513 scope.go:115] "RemoveContainer" containerID="0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28" Oct 2 21:04:08.097829 env[1352]: time="2023-10-02T21:04:08.097796011Z" level=info msg="RemoveContainer for \"0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28\"" Oct 2 21:04:08.099882 env[1352]: time="2023-10-02T21:04:08.099854384Z" level=info msg="RemoveContainer for \"0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28\"" Oct 2 21:04:08.100124 env[1352]: time="2023-10-02T21:04:08.100082568Z" level=error msg="RemoveContainer for \"0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28\" failed" error="failed to set removing state for container \"0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28\": container is already in removing state" Oct 2 21:04:08.104748 kubelet[2513]: E1002 21:04:08.103703 2513 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28\": container is already in removing state" containerID="0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28" Oct 2 21:04:08.104748 kubelet[2513]: E1002 21:04:08.103739 2513 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28": container is already in removing state; Skipping pod "cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)" Oct 2 21:04:08.104748 kubelet[2513]: E1002 21:04:08.104005 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:04:08.108552 env[1352]: time="2023-10-02T21:04:08.108515326Z" level=info msg="RemoveContainer for \"0406172be0d2ef678c66cb3576f1dc0178548bd0d95a5e047682102a3cd94a28\" returns successfully" Oct 2 21:04:08.870818 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e-rootfs.mount: Deactivated successfully. Oct 2 21:04:11.077196 kubelet[2513]: W1002 21:04:11.077160 2513 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfcb0e641_2ff2_4819_a476_1102c29b81ac.slice/cri-containerd-728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e.scope WatchSource:0}: task 728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e not found: not found Oct 2 21:04:13.789000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:13.796914 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:04:13.797049 kernel: audit: type=1400 audit(1696280653.789:1113): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:13.789000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001238920 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:04:13.877974 kernel: audit: type=1300 audit(1696280653.789:1113): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001238920 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:04:13.789000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:13.907217 kernel: audit: type=1327 audit(1696280653.789:1113): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:13.789000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:13.934019 kernel: audit: type=1400 audit(1696280653.789:1114): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:13.789000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001238940 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:04:13.987784 kernel: audit: type=1300 audit(1696280653.789:1114): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001238940 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:04:13.789000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:13.791000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:14.053893 kernel: audit: type=1327 audit(1696280653.789:1114): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:14.054098 kernel: audit: type=1400 audit(1696280653.791:1115): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:13.791000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e67340 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:04:14.099024 kernel: audit: type=1300 audit(1696280653.791:1115): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e67340 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:04:13.791000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:14.125945 kernel: audit: type=1327 audit(1696280653.791:1115): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:13.791000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:14.153935 kernel: audit: type=1400 audit(1696280653.791:1116): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:13.791000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001238ce0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:04:13.791000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:18.846883 kubelet[2513]: E1002 21:04:18.846854 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:04:31.847531 kubelet[2513]: E1002 21:04:31.847499 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:04:45.847266 kubelet[2513]: E1002 21:04:45.847216 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:04:58.669000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:58.681786 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:04:58.682055 kernel: audit: type=1400 audit(1696280698.669:1117): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:58.669000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40017a8480 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:04:58.738065 kernel: audit: type=1300 audit(1696280698.669:1117): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40017a8480 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:04:58.669000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:58.772073 kernel: audit: type=1327 audit(1696280698.669:1117): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:58.672000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:58.805038 kernel: audit: type=1400 audit(1696280698.672:1118): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:58.672000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400208b5e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:04:58.835780 kernel: audit: type=1300 audit(1696280698.672:1118): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400208b5e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:04:58.672000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:58.854074 env[1352]: time="2023-10-02T21:04:58.851400728Z" level=info msg="CreateContainer within sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 21:04:58.864404 kernel: audit: type=1327 audit(1696280698.672:1118): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:58.880809 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1566041587.mount: Deactivated successfully. Oct 2 21:04:58.892731 env[1352]: time="2023-10-02T21:04:58.892677973Z" level=info msg="CreateContainer within sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4\"" Oct 2 21:04:58.894524 env[1352]: time="2023-10-02T21:04:58.893540545Z" level=info msg="StartContainer for \"c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4\"" Oct 2 21:04:58.918482 systemd[1]: Started cri-containerd-c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4.scope. Oct 2 21:04:58.932778 systemd[1]: cri-containerd-c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4.scope: Deactivated successfully. Oct 2 21:04:58.964504 env[1352]: time="2023-10-02T21:04:58.964431297Z" level=info msg="shim disconnected" id=c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4 Oct 2 21:04:58.964504 env[1352]: time="2023-10-02T21:04:58.964491775Z" level=warning msg="cleaning up after shim disconnected" id=c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4 namespace=k8s.io Oct 2 21:04:58.964504 env[1352]: time="2023-10-02T21:04:58.964501335Z" level=info msg="cleaning up dead shim" Oct 2 21:04:58.987912 env[1352]: time="2023-10-02T21:04:58.987841689Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:04:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3094 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:04:58Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:04:58.988159 env[1352]: time="2023-10-02T21:04:58.988103640Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 21:04:58.989518 env[1352]: time="2023-10-02T21:04:58.989476355Z" level=error msg="Failed to pipe stdout of container \"c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4\"" error="reading from a closed fifo" Oct 2 21:04:58.989670 env[1352]: time="2023-10-02T21:04:58.989641909Z" level=error msg="Failed to pipe stderr of container \"c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4\"" error="reading from a closed fifo" Oct 2 21:04:58.996758 env[1352]: time="2023-10-02T21:04:58.996710237Z" level=error msg="StartContainer for \"c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:04:58.997238 kubelet[2513]: E1002 21:04:58.997057 2513 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4" Oct 2 21:04:58.997238 kubelet[2513]: E1002 21:04:58.997175 2513 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:04:58.997238 kubelet[2513]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:04:58.997238 kubelet[2513]: rm /hostbin/cilium-mount Oct 2 21:04:58.997677 kubelet[2513]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8xvxb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:04:58.997733 kubelet[2513]: E1002 21:04:58.997218 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:04:59.234054 kubelet[2513]: I1002 21:04:59.231971 2513 scope.go:115] "RemoveContainer" containerID="728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e" Oct 2 21:04:59.234054 kubelet[2513]: I1002 21:04:59.232717 2513 scope.go:115] "RemoveContainer" containerID="728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e" Oct 2 21:04:59.235199 env[1352]: time="2023-10-02T21:04:59.234133834Z" level=info msg="RemoveContainer for \"728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e\"" Oct 2 21:04:59.235737 env[1352]: time="2023-10-02T21:04:59.235710943Z" level=info msg="RemoveContainer for \"728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e\"" Oct 2 21:04:59.235949 env[1352]: time="2023-10-02T21:04:59.235884337Z" level=error msg="RemoveContainer for \"728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e\" failed" error="failed to set removing state for container \"728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e\": container is already in removing state" Oct 2 21:04:59.236936 kubelet[2513]: E1002 21:04:59.236896 2513 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e\": container is already in removing state" containerID="728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e" Oct 2 21:04:59.237005 kubelet[2513]: E1002 21:04:59.236939 2513 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e": container is already in removing state; Skipping pod "cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)" Oct 2 21:04:59.237224 kubelet[2513]: E1002 21:04:59.237206 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:04:59.244251 env[1352]: time="2023-10-02T21:04:59.242952587Z" level=info msg="RemoveContainer for \"728122f875dc4f392a6ea9e2601f435c14d2682b07ea619adba5b7876a94c97e\" returns successfully" Oct 2 21:04:59.422000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:59.422000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400c4ee9f0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:04:59.497380 kernel: audit: type=1400 audit(1696280699.422:1119): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:59.497536 kernel: audit: type=1300 audit(1696280699.422:1119): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400c4ee9f0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:04:59.422000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:59.523067 kernel: audit: type=1327 audit(1696280699.422:1119): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:59.423000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:59.548846 kernel: audit: type=1400 audit(1696280699.423:1120): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:59.423000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400cfea140 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:04:59.423000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:59.443000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:59.443000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400c4eeab0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:04:59.443000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:59.674000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:59.674000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400c3f1260 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:04:59.674000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:59.675000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:59.675000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400cfea440 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:04:59.675000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:59.686000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:59.686000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400c3f1290 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:04:59.686000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:59.878176 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4-rootfs.mount: Deactivated successfully. Oct 2 21:05:02.070380 kubelet[2513]: W1002 21:05:02.070344 2513 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfcb0e641_2ff2_4819_a476_1102c29b81ac.slice/cri-containerd-c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4.scope WatchSource:0}: task c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4 not found: not found Oct 2 21:05:02.705532 kubelet[2513]: E1002 21:05:02.705503 2513 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 21:05:02.763996 kubelet[2513]: E1002 21:05:02.763973 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:07.765427 kubelet[2513]: E1002 21:05:07.765403 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:10.847160 kubelet[2513]: E1002 21:05:10.847104 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:05:12.767015 kubelet[2513]: E1002 21:05:12.766952 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:13.790000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:13.796334 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:05:13.796472 kernel: audit: type=1400 audit(1696280713.790:1125): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:13.791000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:13.841446 kernel: audit: type=1400 audit(1696280713.791:1126): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:13.791000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400238e120 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:05:13.890274 kernel: audit: type=1300 audit(1696280713.791:1126): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400238e120 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:05:13.791000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:13.915580 kernel: audit: type=1327 audit(1696280713.791:1126): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:13.915722 kernel: audit: type=1300 audit(1696280713.790:1125): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400232e8c0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:05:13.790000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400232e8c0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:05:13.790000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:13.988865 kernel: audit: type=1327 audit(1696280713.790:1125): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:13.792000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:14.012576 kernel: audit: type=1400 audit(1696280713.792:1127): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:14.012699 kernel: audit: type=1300 audit(1696280713.792:1127): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400238e340 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:05:13.792000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400238e340 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:05:13.792000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:14.079790 kernel: audit: type=1327 audit(1696280713.792:1127): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:13.793000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:14.101703 kernel: audit: type=1400 audit(1696280713.793:1128): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:13.793000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400238e460 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:05:13.793000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:17.768724 kubelet[2513]: E1002 21:05:17.768678 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:22.769374 kubelet[2513]: E1002 21:05:22.769320 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:23.847389 kubelet[2513]: E1002 21:05:23.847331 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:05:27.770130 kubelet[2513]: E1002 21:05:27.770068 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:32.771452 kubelet[2513]: E1002 21:05:32.771399 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:37.772238 kubelet[2513]: E1002 21:05:37.772213 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:38.847371 kubelet[2513]: E1002 21:05:38.847329 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:05:42.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.18:22-10.200.12.6:59872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:05:42.664955 systemd[1]: Started sshd@7-10.200.20.18:22-10.200.12.6:59872.service. Oct 2 21:05:42.674698 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:05:42.674924 kernel: audit: type=1130 audit(1696280742.663:1129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.18:22-10.200.12.6:59872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:05:42.773538 kubelet[2513]: E1002 21:05:42.773492 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:43.083000 audit[3112]: USER_ACCT pid=3112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:43.085690 sshd[3112]: Accepted publickey for core from 10.200.12.6 port 59872 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:05:43.114627 kernel: audit: type=1101 audit(1696280743.083:1130): pid=3112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:43.115110 sshd[3112]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:05:43.113000 audit[3112]: CRED_ACQ pid=3112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:43.174128 kernel: audit: type=1103 audit(1696280743.113:1131): pid=3112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:43.174238 kernel: audit: type=1006 audit(1696280743.113:1132): pid=3112 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 21:05:43.150550 systemd[1]: Started session-10.scope. Oct 2 21:05:43.152377 systemd-logind[1337]: New session 10 of user core. Oct 2 21:05:43.113000 audit[3112]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff13b3f0 a2=3 a3=1 items=0 ppid=1 pid=3112 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:05:43.203824 kernel: audit: type=1300 audit(1696280743.113:1132): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff13b3f0 a2=3 a3=1 items=0 ppid=1 pid=3112 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:05:43.113000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:05:43.213018 kernel: audit: type=1327 audit(1696280743.113:1132): proctitle=737368643A20636F7265205B707269765D Oct 2 21:05:43.173000 audit[3112]: USER_START pid=3112 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:43.240939 kernel: audit: type=1105 audit(1696280743.173:1133): pid=3112 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:43.177000 audit[3114]: CRED_ACQ pid=3114 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:43.276678 kernel: audit: type=1103 audit(1696280743.177:1134): pid=3114 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:43.545060 sshd[3112]: pam_unix(sshd:session): session closed for user core Oct 2 21:05:43.544000 audit[3112]: USER_END pid=3112 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:43.553480 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 21:05:43.554387 systemd[1]: sshd@7-10.200.20.18:22-10.200.12.6:59872.service: Deactivated successfully. Oct 2 21:05:43.547000 audit[3112]: CRED_DISP pid=3112 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:43.615512 kernel: audit: type=1106 audit(1696280743.544:1135): pid=3112 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:43.615740 kernel: audit: type=1104 audit(1696280743.547:1136): pid=3112 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:43.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.18:22-10.200.12.6:59872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:05:43.616788 systemd-logind[1337]: Session 10 logged out. Waiting for processes to exit. Oct 2 21:05:43.617659 systemd-logind[1337]: Removed session 10. Oct 2 21:05:47.774581 kubelet[2513]: E1002 21:05:47.774557 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:52.776066 kubelet[2513]: E1002 21:05:52.775979 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:52.847468 kubelet[2513]: E1002 21:05:52.847433 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:05:53.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.18:22-10.200.12.6:40050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:05:53.619893 systemd[1]: Started sshd@8-10.200.20.18:22-10.200.12.6:40050.service. Oct 2 21:05:53.625665 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:05:53.625782 kernel: audit: type=1130 audit(1696280753.619:1138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.18:22-10.200.12.6:40050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:05:54.067000 audit[3126]: USER_ACCT pid=3126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:54.068268 sshd[3126]: Accepted publickey for core from 10.200.12.6 port 40050 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:05:54.097672 kernel: audit: type=1101 audit(1696280754.067:1139): pid=3126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:54.098191 sshd[3126]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:05:54.097000 audit[3126]: CRED_ACQ pid=3126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:54.142772 kernel: audit: type=1103 audit(1696280754.097:1140): pid=3126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:54.142892 kernel: audit: type=1006 audit(1696280754.097:1141): pid=3126 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 21:05:54.097000 audit[3126]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8b272e0 a2=3 a3=1 items=0 ppid=1 pid=3126 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:05:54.171010 kernel: audit: type=1300 audit(1696280754.097:1141): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8b272e0 a2=3 a3=1 items=0 ppid=1 pid=3126 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:05:54.097000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:05:54.179816 kernel: audit: type=1327 audit(1696280754.097:1141): proctitle=737368643A20636F7265205B707269765D Oct 2 21:05:54.173622 systemd[1]: Started session-11.scope. Oct 2 21:05:54.179877 systemd-logind[1337]: New session 11 of user core. Oct 2 21:05:54.183000 audit[3126]: USER_START pid=3126 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:54.212000 audit[3128]: CRED_ACQ pid=3128 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:54.237481 kernel: audit: type=1105 audit(1696280754.183:1142): pid=3126 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:54.237557 kernel: audit: type=1103 audit(1696280754.212:1143): pid=3128 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:54.547830 sshd[3126]: pam_unix(sshd:session): session closed for user core Oct 2 21:05:54.548000 audit[3126]: USER_END pid=3126 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:54.552407 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 21:05:54.553967 systemd-logind[1337]: Session 11 logged out. Waiting for processes to exit. Oct 2 21:05:54.554954 systemd-logind[1337]: Removed session 11. Oct 2 21:05:54.556259 systemd[1]: sshd@8-10.200.20.18:22-10.200.12.6:40050.service: Deactivated successfully. Oct 2 21:05:54.549000 audit[3126]: CRED_DISP pid=3126 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:54.620119 kernel: audit: type=1106 audit(1696280754.548:1144): pid=3126 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:54.620296 kernel: audit: type=1104 audit(1696280754.549:1145): pid=3126 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:05:54.555000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.18:22-10.200.12.6:40050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:05:57.777915 kubelet[2513]: E1002 21:05:57.777859 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:58.673000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:58.682958 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:05:58.683066 kernel: audit: type=1400 audit(1696280758.673:1147): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:58.673000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d7ac60 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:05:58.741318 kernel: audit: type=1300 audit(1696280758.673:1147): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d7ac60 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:05:58.673000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:58.674000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:58.803877 kernel: audit: type=1327 audit(1696280758.673:1147): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:58.803993 kernel: audit: type=1400 audit(1696280758.674:1148): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:58.804014 kernel: audit: type=1300 audit(1696280758.674:1148): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000a908e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:05:58.674000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000a908e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:05:58.674000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:58.860973 kernel: audit: type=1327 audit(1696280758.674:1148): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:59.423000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:59.423000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4006ade690 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:05:59.494537 kernel: audit: type=1400 audit(1696280759.423:1149): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:59.494720 kernel: audit: type=1300 audit(1696280759.423:1149): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4006ade690 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:05:59.494786 kernel: audit: type=1327 audit(1696280759.423:1149): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:59.423000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:59.424000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:59.546223 kernel: audit: type=1400 audit(1696280759.424:1150): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:59.424000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40033c5c00 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:05:59.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:59.445000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:59.445000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4006ade6f0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:05:59.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:59.675000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:59.675000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4006adee10 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:05:59.675000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:59.677000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:59.677000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002368520 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:05:59.677000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:59.687000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:59.687000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4006adee40 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:05:59.687000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:02.779028 kubelet[2513]: E1002 21:06:02.778989 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:03.847090 kubelet[2513]: E1002 21:06:03.847057 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:06:04.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.18:22-10.200.12.6:53296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:04.618993 systemd[1]: Started sshd@9-10.200.20.18:22-10.200.12.6:53296.service. Oct 2 21:06:04.627728 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:06:04.627837 kernel: audit: type=1130 audit(1696280764.618:1155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.18:22-10.200.12.6:53296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:05.035000 audit[3141]: USER_ACCT pid=3141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:05.035905 sshd[3141]: Accepted publickey for core from 10.200.12.6 port 53296 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:06:05.037929 sshd[3141]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:06:05.037000 audit[3141]: CRED_ACQ pid=3141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:05.093713 kernel: audit: type=1101 audit(1696280765.035:1156): pid=3141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:05.093841 kernel: audit: type=1103 audit(1696280765.037:1157): pid=3141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:05.108998 kernel: audit: type=1006 audit(1696280765.037:1158): pid=3141 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 21:06:05.037000 audit[3141]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff02fff10 a2=3 a3=1 items=0 ppid=1 pid=3141 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:05.113315 systemd-logind[1337]: New session 12 of user core. Oct 2 21:06:05.113988 systemd[1]: Started session-12.scope. Oct 2 21:06:05.037000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:05.145908 kernel: audit: type=1300 audit(1696280765.037:1158): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff02fff10 a2=3 a3=1 items=0 ppid=1 pid=3141 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:05.146036 kernel: audit: type=1327 audit(1696280765.037:1158): proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:05.118000 audit[3141]: USER_START pid=3141 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:05.192737 kernel: audit: type=1105 audit(1696280765.118:1159): pid=3141 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:05.121000 audit[3143]: CRED_ACQ pid=3143 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:05.215551 kernel: audit: type=1103 audit(1696280765.121:1160): pid=3143 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:05.433623 sshd[3141]: pam_unix(sshd:session): session closed for user core Oct 2 21:06:05.434000 audit[3141]: USER_END pid=3141 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:05.437412 systemd-logind[1337]: Session 12 logged out. Waiting for processes to exit. Oct 2 21:06:05.438822 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 21:06:05.440148 systemd-logind[1337]: Removed session 12. Oct 2 21:06:05.440972 systemd[1]: sshd@9-10.200.20.18:22-10.200.12.6:53296.service: Deactivated successfully. Oct 2 21:06:05.434000 audit[3141]: CRED_DISP pid=3141 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:05.504347 kernel: audit: type=1106 audit(1696280765.434:1161): pid=3141 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:05.504574 kernel: audit: type=1104 audit(1696280765.434:1162): pid=3141 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:05.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.18:22-10.200.12.6:53296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:07.780224 kubelet[2513]: E1002 21:06:07.780198 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:12.781465 kubelet[2513]: E1002 21:06:12.781438 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:13.791000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:13.797330 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:06:13.797472 kernel: audit: type=1400 audit(1696280773.791:1164): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:13.792000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:13.843907 kernel: audit: type=1400 audit(1696280773.792:1165): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:13.844094 kernel: audit: type=1300 audit(1696280773.792:1165): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000c408a0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:06:13.792000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000c408a0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:06:13.792000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:13.912195 kernel: audit: type=1327 audit(1696280773.792:1165): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:13.912308 kernel: audit: type=1300 audit(1696280773.791:1164): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d7ce60 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:06:13.791000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d7ce60 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:06:13.791000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:13.986387 kernel: audit: type=1327 audit(1696280773.791:1164): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:13.797000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:14.010672 kernel: audit: type=1400 audit(1696280773.797:1166): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:14.010799 kernel: audit: type=1300 audit(1696280773.797:1166): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d7d0a0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:06:13.797000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d7d0a0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:06:13.797000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:14.083432 kernel: audit: type=1327 audit(1696280773.797:1166): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:13.797000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:14.105908 kernel: audit: type=1400 audit(1696280773.797:1167): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:13.797000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d7d120 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:06:13.797000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:15.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.18:22-10.200.12.6:38458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:15.510376 systemd[1]: Started sshd@10-10.200.20.18:22-10.200.12.6:38458.service. Oct 2 21:06:15.959000 audit[3153]: USER_ACCT pid=3153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:15.960745 sshd[3153]: Accepted publickey for core from 10.200.12.6 port 38458 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:06:15.964206 sshd[3153]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:06:15.963000 audit[3153]: CRED_ACQ pid=3153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:15.963000 audit[3153]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9c5c1d0 a2=3 a3=1 items=0 ppid=1 pid=3153 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:15.963000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:15.971167 systemd[1]: Started session-13.scope. Oct 2 21:06:15.971562 systemd-logind[1337]: New session 13 of user core. Oct 2 21:06:15.977000 audit[3153]: USER_START pid=3153 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:15.982000 audit[3155]: CRED_ACQ pid=3155 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:16.364395 sshd[3153]: pam_unix(sshd:session): session closed for user core Oct 2 21:06:16.364000 audit[3153]: USER_END pid=3153 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:16.365000 audit[3153]: CRED_DISP pid=3153 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:16.369000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.18:22-10.200.12.6:38458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:16.369982 systemd[1]: sshd@10-10.200.20.18:22-10.200.12.6:38458.service: Deactivated successfully. Oct 2 21:06:16.370760 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 21:06:16.371645 systemd-logind[1337]: Session 13 logged out. Waiting for processes to exit. Oct 2 21:06:16.372346 systemd-logind[1337]: Removed session 13. Oct 2 21:06:16.846785 kubelet[2513]: E1002 21:06:16.846727 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:06:17.783224 kubelet[2513]: E1002 21:06:17.783185 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:22.784464 kubelet[2513]: E1002 21:06:22.784440 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:26.480972 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 21:06:26.481112 kernel: audit: type=1130 audit(1696280786.432:1177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.18:22-10.200.12.6:48600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:26.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.18:22-10.200.12.6:48600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:26.432936 systemd[1]: Started sshd@11-10.200.20.18:22-10.200.12.6:48600.service. Oct 2 21:06:26.854000 audit[3170]: USER_ACCT pid=3170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:26.861180 sshd[3170]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:06:26.863561 sshd[3170]: Accepted publickey for core from 10.200.12.6 port 48600 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:06:26.860000 audit[3170]: CRED_ACQ pid=3170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:26.902004 systemd[1]: Started session-14.scope. Oct 2 21:06:26.903323 systemd-logind[1337]: New session 14 of user core. Oct 2 21:06:26.914723 kernel: audit: type=1101 audit(1696280786.854:1178): pid=3170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:26.914826 kernel: audit: type=1103 audit(1696280786.860:1179): pid=3170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:26.936875 kernel: audit: type=1006 audit(1696280786.860:1180): pid=3170 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 21:06:26.860000 audit[3170]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef022260 a2=3 a3=1 items=0 ppid=1 pid=3170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:26.984646 kernel: audit: type=1300 audit(1696280786.860:1180): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef022260 a2=3 a3=1 items=0 ppid=1 pid=3170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:26.860000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:26.997394 kernel: audit: type=1327 audit(1696280786.860:1180): proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:26.915000 audit[3170]: USER_START pid=3170 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:27.027979 kernel: audit: type=1105 audit(1696280786.915:1181): pid=3170 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:26.921000 audit[3175]: CRED_ACQ pid=3175 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:27.065511 kernel: audit: type=1103 audit(1696280786.921:1182): pid=3175 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:27.252842 sshd[3170]: pam_unix(sshd:session): session closed for user core Oct 2 21:06:27.253000 audit[3170]: USER_END pid=3170 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:27.256810 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 21:06:27.257685 systemd[1]: sshd@11-10.200.20.18:22-10.200.12.6:48600.service: Deactivated successfully. Oct 2 21:06:27.254000 audit[3170]: CRED_DISP pid=3170 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:27.282018 systemd-logind[1337]: Session 14 logged out. Waiting for processes to exit. Oct 2 21:06:27.304383 kernel: audit: type=1106 audit(1696280787.253:1183): pid=3170 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:27.304484 kernel: audit: type=1104 audit(1696280787.254:1184): pid=3170 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:27.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.18:22-10.200.12.6:48600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:27.305267 systemd-logind[1337]: Removed session 14. Oct 2 21:06:27.785773 kubelet[2513]: E1002 21:06:27.785723 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:28.851620 env[1352]: time="2023-10-02T21:06:28.849987950Z" level=info msg="CreateContainer within sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 21:06:28.874397 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1406661027.mount: Deactivated successfully. Oct 2 21:06:28.884859 env[1352]: time="2023-10-02T21:06:28.884807973Z" level=info msg="CreateContainer within sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d\"" Oct 2 21:06:28.885449 env[1352]: time="2023-10-02T21:06:28.885423253Z" level=info msg="StartContainer for \"519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d\"" Oct 2 21:06:28.910032 systemd[1]: Started cri-containerd-519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d.scope. Oct 2 21:06:28.925145 systemd[1]: cri-containerd-519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d.scope: Deactivated successfully. Oct 2 21:06:28.965487 env[1352]: time="2023-10-02T21:06:28.965432375Z" level=info msg="shim disconnected" id=519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d Oct 2 21:06:28.966105 env[1352]: time="2023-10-02T21:06:28.966083935Z" level=warning msg="cleaning up after shim disconnected" id=519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d namespace=k8s.io Oct 2 21:06:28.966182 env[1352]: time="2023-10-02T21:06:28.966169935Z" level=info msg="cleaning up dead shim" Oct 2 21:06:28.988208 env[1352]: time="2023-10-02T21:06:28.988159925Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:06:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3211 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:06:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:06:28.988669 env[1352]: time="2023-10-02T21:06:28.988613884Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 21:06:28.988902 env[1352]: time="2023-10-02T21:06:28.988870764Z" level=error msg="Failed to pipe stdout of container \"519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d\"" error="reading from a closed fifo" Oct 2 21:06:28.989011 env[1352]: time="2023-10-02T21:06:28.988989844Z" level=error msg="Failed to pipe stderr of container \"519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d\"" error="reading from a closed fifo" Oct 2 21:06:28.992606 env[1352]: time="2023-10-02T21:06:28.992531522Z" level=error msg="StartContainer for \"519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:06:28.992878 kubelet[2513]: E1002 21:06:28.992854 2513 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d" Oct 2 21:06:28.993134 kubelet[2513]: E1002 21:06:28.992977 2513 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:06:28.993134 kubelet[2513]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:06:28.993134 kubelet[2513]: rm /hostbin/cilium-mount Oct 2 21:06:28.993134 kubelet[2513]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8xvxb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:06:28.993249 kubelet[2513]: E1002 21:06:28.993010 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:06:29.386047 kubelet[2513]: I1002 21:06:29.386017 2513 scope.go:115] "RemoveContainer" containerID="c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4" Oct 2 21:06:29.386450 kubelet[2513]: I1002 21:06:29.386427 2513 scope.go:115] "RemoveContainer" containerID="c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4" Oct 2 21:06:29.388105 env[1352]: time="2023-10-02T21:06:29.388072391Z" level=info msg="RemoveContainer for \"c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4\"" Oct 2 21:06:29.388332 env[1352]: time="2023-10-02T21:06:29.388110591Z" level=info msg="RemoveContainer for \"c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4\"" Oct 2 21:06:29.388417 env[1352]: time="2023-10-02T21:06:29.388383111Z" level=error msg="RemoveContainer for \"c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4\" failed" error="failed to set removing state for container \"c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4\": container is already in removing state" Oct 2 21:06:29.388564 kubelet[2513]: E1002 21:06:29.388520 2513 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4\": container is already in removing state" containerID="c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4" Oct 2 21:06:29.388631 kubelet[2513]: I1002 21:06:29.388588 2513 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4} err="rpc error: code = Unknown desc = failed to set removing state for container \"c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4\": container is already in removing state" Oct 2 21:06:29.394892 env[1352]: time="2023-10-02T21:06:29.394855826Z" level=info msg="RemoveContainer for \"c11cb4bc643b8cbaa8bf94bc90317f55d00a3ab4c5ef21b5f840a6e6df25d9f4\" returns successfully" Oct 2 21:06:29.395450 kubelet[2513]: E1002 21:06:29.395418 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:06:29.870795 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d-rootfs.mount: Deactivated successfully. Oct 2 21:06:32.069604 kubelet[2513]: W1002 21:06:32.069500 2513 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfcb0e641_2ff2_4819_a476_1102c29b81ac.slice/cri-containerd-519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d.scope WatchSource:0}: task 519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d not found: not found Oct 2 21:06:32.786586 kubelet[2513]: E1002 21:06:32.786561 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:37.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.18:22-10.200.12.6:55220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:37.327834 systemd[1]: Started sshd@12-10.200.20.18:22-10.200.12.6:55220.service. Oct 2 21:06:37.333631 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:06:37.333731 kernel: audit: type=1130 audit(1696280797.327:1186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.18:22-10.200.12.6:55220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:37.775000 audit[3226]: USER_ACCT pid=3226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:37.776519 sshd[3226]: Accepted publickey for core from 10.200.12.6 port 55220 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:06:37.801768 kubelet[2513]: E1002 21:06:37.801686 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:37.802618 kernel: audit: type=1101 audit(1696280797.775:1187): pid=3226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:37.803170 sshd[3226]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:06:37.802000 audit[3226]: CRED_ACQ pid=3226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:37.843898 kernel: audit: type=1103 audit(1696280797.802:1188): pid=3226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:37.844119 kernel: audit: type=1006 audit(1696280797.802:1189): pid=3226 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 21:06:37.802000 audit[3226]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcfb39230 a2=3 a3=1 items=0 ppid=1 pid=3226 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:37.888978 kernel: audit: type=1300 audit(1696280797.802:1189): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcfb39230 a2=3 a3=1 items=0 ppid=1 pid=3226 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:37.802000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:37.898099 kernel: audit: type=1327 audit(1696280797.802:1189): proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:37.900707 systemd-logind[1337]: New session 15 of user core. Oct 2 21:06:37.901425 systemd[1]: Started session-15.scope. Oct 2 21:06:37.906000 audit[3226]: USER_START pid=3226 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:37.935269 kernel: audit: type=1105 audit(1696280797.906:1190): pid=3226 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:37.935367 kernel: audit: type=1103 audit(1696280797.934:1191): pid=3228 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:37.934000 audit[3228]: CRED_ACQ pid=3228 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:38.270900 sshd[3226]: pam_unix(sshd:session): session closed for user core Oct 2 21:06:38.271000 audit[3226]: USER_END pid=3226 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:38.276207 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 21:06:38.277124 systemd[1]: sshd@12-10.200.20.18:22-10.200.12.6:55220.service: Deactivated successfully. Oct 2 21:06:38.271000 audit[3226]: CRED_DISP pid=3226 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:38.302239 systemd-logind[1337]: Session 15 logged out. Waiting for processes to exit. Oct 2 21:06:38.325263 kernel: audit: type=1106 audit(1696280798.271:1192): pid=3226 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:38.325355 kernel: audit: type=1104 audit(1696280798.271:1193): pid=3226 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:38.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.18:22-10.200.12.6:55220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:38.325995 systemd-logind[1337]: Removed session 15. Oct 2 21:06:41.847525 kubelet[2513]: E1002 21:06:41.847464 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:06:42.802579 kubelet[2513]: E1002 21:06:42.802507 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:47.803559 kubelet[2513]: E1002 21:06:47.803513 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:48.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.18:22-10.200.12.6:37910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:48.342642 systemd[1]: Started sshd@13-10.200.20.18:22-10.200.12.6:37910.service. Oct 2 21:06:48.350912 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:06:48.351032 kernel: audit: type=1130 audit(1696280808.342:1195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.18:22-10.200.12.6:37910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:48.769000 audit[3242]: USER_ACCT pid=3242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:48.770321 sshd[3242]: Accepted publickey for core from 10.200.12.6 port 37910 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:06:48.776150 sshd[3242]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:06:48.775000 audit[3242]: CRED_ACQ pid=3242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:48.829103 kernel: audit: type=1101 audit(1696280808.769:1196): pid=3242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:48.829207 kernel: audit: type=1103 audit(1696280808.775:1197): pid=3242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:48.845662 kernel: audit: type=1006 audit(1696280808.775:1198): pid=3242 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 21:06:48.775000 audit[3242]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3a1d9e0 a2=3 a3=1 items=0 ppid=1 pid=3242 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:48.876674 kernel: audit: type=1300 audit(1696280808.775:1198): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3a1d9e0 a2=3 a3=1 items=0 ppid=1 pid=3242 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:48.775000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:48.885394 kernel: audit: type=1327 audit(1696280808.775:1198): proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:48.888423 systemd[1]: Started session-16.scope. Oct 2 21:06:48.888620 systemd-logind[1337]: New session 16 of user core. Oct 2 21:06:48.892000 audit[3242]: USER_START pid=3242 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:48.922525 kernel: audit: type=1105 audit(1696280808.892:1199): pid=3242 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:48.922671 kernel: audit: type=1103 audit(1696280808.921:1200): pid=3244 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:48.921000 audit[3244]: CRED_ACQ pid=3244 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:49.251873 sshd[3242]: pam_unix(sshd:session): session closed for user core Oct 2 21:06:49.252000 audit[3242]: USER_END pid=3242 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:49.260044 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 21:06:49.260991 systemd[1]: sshd@13-10.200.20.18:22-10.200.12.6:37910.service: Deactivated successfully. Oct 2 21:06:49.255000 audit[3242]: CRED_DISP pid=3242 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:49.299743 kernel: audit: type=1106 audit(1696280809.252:1201): pid=3242 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:49.299838 kernel: audit: type=1104 audit(1696280809.255:1202): pid=3242 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:49.299409 systemd-logind[1337]: Session 16 logged out. Waiting for processes to exit. Oct 2 21:06:49.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.18:22-10.200.12.6:37910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:49.322651 systemd-logind[1337]: Removed session 16. Oct 2 21:06:52.805623 kubelet[2513]: E1002 21:06:52.805553 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:55.847048 kubelet[2513]: E1002 21:06:55.847001 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:06:57.807261 kubelet[2513]: E1002 21:06:57.807239 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:58.674000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:58.684317 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:06:58.684552 kernel: audit: type=1400 audit(1696280818.674:1204): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:58.674000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40022137a0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:06:58.739271 kernel: audit: type=1300 audit(1696280818.674:1204): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40022137a0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:06:58.674000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:58.781702 kernel: audit: type=1327 audit(1696280818.674:1204): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:58.674000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:58.808233 kernel: audit: type=1400 audit(1696280818.674:1205): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:58.674000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400230c060 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:06:58.839088 kernel: audit: type=1300 audit(1696280818.674:1205): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400230c060 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:06:58.839247 kernel: audit: type=1327 audit(1696280818.674:1205): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:58.674000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:59.326753 systemd[1]: Started sshd@14-10.200.20.18:22-10.200.12.6:36144.service. Oct 2 21:06:59.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.18:22-10.200.12.6:36144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:59.365663 kernel: audit: type=1130 audit(1696280819.326:1206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.18:22-10.200.12.6:36144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:59.426000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:59.426000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:59.492354 kernel: audit: type=1400 audit(1696280819.426:1208): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:59.492459 kernel: audit: type=1400 audit(1696280819.426:1207): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:59.426000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400afbece0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:06:59.523078 kernel: audit: type=1300 audit(1696280819.426:1207): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400afbece0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:06:59.426000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400ea8f740 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:06:59.426000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:59.426000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:59.459000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:59.459000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400ea8f7d0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:06:59.459000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:59.675000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:59.675000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400ea35050 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:06:59.675000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:59.678000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:59.678000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400b7be7c0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:06:59.678000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:59.688000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:59.688000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400ea8fa10 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:06:59.688000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:59.815000 audit[3259]: USER_ACCT pid=3259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:59.817912 sshd[3259]: Accepted publickey for core from 10.200.12.6 port 36144 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:06:59.817000 audit[3259]: CRED_ACQ pid=3259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:59.817000 audit[3259]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd60aa7f0 a2=3 a3=1 items=0 ppid=1 pid=3259 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:59.817000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:59.818978 sshd[3259]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:06:59.823697 systemd-logind[1337]: New session 17 of user core. Oct 2 21:06:59.824232 systemd[1]: Started session-17.scope. Oct 2 21:06:59.827000 audit[3259]: USER_START pid=3259 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:59.830000 audit[3261]: CRED_ACQ pid=3261 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:00.225843 sshd[3259]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:00.226000 audit[3259]: USER_END pid=3259 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:00.226000 audit[3259]: CRED_DISP pid=3259 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:00.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.18:22-10.200.12.6:36144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:00.229503 systemd[1]: sshd@14-10.200.20.18:22-10.200.12.6:36144.service: Deactivated successfully. Oct 2 21:07:00.230205 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 21:07:00.230751 systemd-logind[1337]: Session 17 logged out. Waiting for processes to exit. Oct 2 21:07:00.231579 systemd-logind[1337]: Removed session 17. Oct 2 21:07:02.808507 kubelet[2513]: E1002 21:07:02.808483 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:07.809831 kubelet[2513]: E1002 21:07:07.809799 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:07.846845 kubelet[2513]: E1002 21:07:07.846812 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:07:10.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.18:22-10.200.12.6:33944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:10.304330 systemd[1]: Started sshd@15-10.200.20.18:22-10.200.12.6:33944.service. Oct 2 21:07:10.310748 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 21:07:10.310856 kernel: audit: type=1130 audit(1696280830.302:1221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.18:22-10.200.12.6:33944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:10.754000 audit[3273]: USER_ACCT pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:10.756539 sshd[3273]: Accepted publickey for core from 10.200.12.6 port 33944 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:10.761252 sshd[3273]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:10.759000 audit[3273]: CRED_ACQ pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:10.815666 kernel: audit: type=1101 audit(1696280830.754:1222): pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:10.815819 kernel: audit: type=1103 audit(1696280830.759:1223): pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:10.815872 kernel: audit: type=1006 audit(1696280830.759:1224): pid=3273 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 21:07:10.759000 audit[3273]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe528bb40 a2=3 a3=1 items=0 ppid=1 pid=3273 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:10.858870 kernel: audit: type=1300 audit(1696280830.759:1224): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe528bb40 a2=3 a3=1 items=0 ppid=1 pid=3273 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:10.865821 kernel: audit: type=1327 audit(1696280830.759:1224): proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:10.759000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:10.865093 systemd[1]: Started session-18.scope. Oct 2 21:07:10.878183 systemd-logind[1337]: New session 18 of user core. Oct 2 21:07:10.881000 audit[3273]: USER_START pid=3273 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:10.885000 audit[3275]: CRED_ACQ pid=3275 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:10.935262 kernel: audit: type=1105 audit(1696280830.881:1225): pid=3273 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:10.935373 kernel: audit: type=1103 audit(1696280830.885:1226): pid=3275 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:11.227639 sshd[3273]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:11.226000 audit[3273]: USER_END pid=3273 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:11.231062 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 21:07:11.231913 systemd[1]: sshd@15-10.200.20.18:22-10.200.12.6:33944.service: Deactivated successfully. Oct 2 21:07:11.227000 audit[3273]: CRED_DISP pid=3273 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:11.293188 kernel: audit: type=1106 audit(1696280831.226:1227): pid=3273 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:11.293326 kernel: audit: type=1104 audit(1696280831.227:1228): pid=3273 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:11.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.18:22-10.200.12.6:33944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:11.293714 systemd-logind[1337]: Session 18 logged out. Waiting for processes to exit. Oct 2 21:07:11.294460 systemd-logind[1337]: Removed session 18. Oct 2 21:07:12.811809 kubelet[2513]: E1002 21:07:12.811757 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:13.792000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:13.792000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400238f300 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:07:13.792000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:13.792000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:13.792000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002592ba0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:07:13.792000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:13.797000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:13.797000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:13.797000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002592cc0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:07:13.797000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400238f420 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:07:13.797000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:13.797000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:17.813058 kubelet[2513]: E1002 21:07:17.813027 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:19.846961 kubelet[2513]: E1002 21:07:19.846919 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:07:21.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.18:22-10.200.12.6:44020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:21.299639 systemd[1]: Started sshd@16-10.200.20.18:22-10.200.12.6:44020.service. Oct 2 21:07:21.305141 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 21:07:21.305247 kernel: audit: type=1130 audit(1696280841.298:1234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.18:22-10.200.12.6:44020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:21.718000 audit[3287]: USER_ACCT pid=3287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:21.720201 sshd[3287]: Accepted publickey for core from 10.200.12.6 port 44020 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:21.747667 kernel: audit: type=1101 audit(1696280841.718:1235): pid=3287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:21.748579 sshd[3287]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:21.746000 audit[3287]: CRED_ACQ pid=3287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:21.798313 kernel: audit: type=1103 audit(1696280841.746:1236): pid=3287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:21.798432 kernel: audit: type=1006 audit(1696280841.746:1237): pid=3287 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 21:07:21.746000 audit[3287]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5737d10 a2=3 a3=1 items=0 ppid=1 pid=3287 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:21.824563 kernel: audit: type=1300 audit(1696280841.746:1237): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5737d10 a2=3 a3=1 items=0 ppid=1 pid=3287 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:21.746000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:21.833126 kernel: audit: type=1327 audit(1696280841.746:1237): proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:21.836340 systemd[1]: Started session-19.scope. Oct 2 21:07:21.837397 systemd-logind[1337]: New session 19 of user core. Oct 2 21:07:21.840000 audit[3287]: USER_START pid=3287 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:21.888658 kernel: audit: type=1105 audit(1696280841.840:1238): pid=3287 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:21.887000 audit[3289]: CRED_ACQ pid=3289 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:21.911621 kernel: audit: type=1103 audit(1696280841.887:1239): pid=3289 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:22.213789 sshd[3287]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:22.213000 audit[3287]: USER_END pid=3287 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:22.222047 systemd-logind[1337]: Session 19 logged out. Waiting for processes to exit. Oct 2 21:07:22.222874 systemd[1]: sshd@16-10.200.20.18:22-10.200.12.6:44020.service: Deactivated successfully. Oct 2 21:07:22.223573 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 21:07:22.224662 systemd-logind[1337]: Removed session 19. Oct 2 21:07:22.213000 audit[3287]: CRED_DISP pid=3287 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:22.282148 kernel: audit: type=1106 audit(1696280842.213:1240): pid=3287 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:22.282294 kernel: audit: type=1104 audit(1696280842.213:1241): pid=3287 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:22.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.18:22-10.200.12.6:44020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:22.289924 systemd[1]: Started sshd@17-10.200.20.18:22-10.200.12.6:44036.service. Oct 2 21:07:22.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.18:22-10.200.12.6:44036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:22.739000 audit[3299]: USER_ACCT pid=3299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:22.742590 sshd[3299]: Accepted publickey for core from 10.200.12.6 port 44036 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:22.741000 audit[3299]: CRED_ACQ pid=3299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:22.741000 audit[3299]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1c3bbc0 a2=3 a3=1 items=0 ppid=1 pid=3299 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:22.741000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:22.743789 sshd[3299]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:22.748876 systemd[1]: Started session-20.scope. Oct 2 21:07:22.749488 systemd-logind[1337]: New session 20 of user core. Oct 2 21:07:22.752000 audit[3299]: USER_START pid=3299 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:22.762000 audit[3301]: CRED_ACQ pid=3301 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:22.814157 kubelet[2513]: E1002 21:07:22.814134 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:23.829847 sshd[3299]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:23.830000 audit[3299]: USER_END pid=3299 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:23.830000 audit[3299]: CRED_DISP pid=3299 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:23.833567 systemd[1]: sshd@17-10.200.20.18:22-10.200.12.6:44036.service: Deactivated successfully. Oct 2 21:07:23.832000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.18:22-10.200.12.6:44036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:23.834349 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 21:07:23.834887 systemd-logind[1337]: Session 20 logged out. Waiting for processes to exit. Oct 2 21:07:23.835636 systemd-logind[1337]: Removed session 20. Oct 2 21:07:23.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.18:22-10.200.12.6:44044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:23.900017 systemd[1]: Started sshd@18-10.200.20.18:22-10.200.12.6:44044.service. Oct 2 21:07:24.312000 audit[3309]: USER_ACCT pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.314072 sshd[3309]: Accepted publickey for core from 10.200.12.6 port 44044 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:24.314000 audit[3309]: CRED_ACQ pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.314000 audit[3309]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdba89310 a2=3 a3=1 items=0 ppid=1 pid=3309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:24.314000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:24.316008 sshd[3309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:24.320384 systemd[1]: Started session-21.scope. Oct 2 21:07:24.321480 systemd-logind[1337]: New session 21 of user core. Oct 2 21:07:24.324000 audit[3309]: USER_START pid=3309 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.326000 audit[3311]: CRED_ACQ pid=3311 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.718176 sshd[3309]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:24.717000 audit[3309]: USER_END pid=3309 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.717000 audit[3309]: CRED_DISP pid=3309 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.720667 systemd[1]: sshd@18-10.200.20.18:22-10.200.12.6:44044.service: Deactivated successfully. Oct 2 21:07:24.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.18:22-10.200.12.6:44044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:24.721417 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 21:07:24.722083 systemd-logind[1337]: Session 21 logged out. Waiting for processes to exit. Oct 2 21:07:24.722770 systemd-logind[1337]: Removed session 21. Oct 2 21:07:27.815602 kubelet[2513]: E1002 21:07:27.815562 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:32.817053 kubelet[2513]: E1002 21:07:32.817026 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:33.847311 kubelet[2513]: E1002 21:07:33.847278 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:07:34.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.18:22-10.200.12.6:33600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:34.792957 systemd[1]: Started sshd@19-10.200.20.18:22-10.200.12.6:33600.service. Oct 2 21:07:34.799614 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 21:07:34.799716 kernel: audit: type=1130 audit(1696280854.791:1261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.18:22-10.200.12.6:33600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:35.246000 audit[3321]: USER_ACCT pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.253633 sshd[3321]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:35.255907 sshd[3321]: Accepted publickey for core from 10.200.12.6 port 33600 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:35.251000 audit[3321]: CRED_ACQ pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.314466 kernel: audit: type=1101 audit(1696280855.246:1262): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.314687 kernel: audit: type=1103 audit(1696280855.251:1263): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.328953 kernel: audit: type=1006 audit(1696280855.251:1264): pid=3321 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 21:07:35.251000 audit[3321]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4e1b230 a2=3 a3=1 items=0 ppid=1 pid=3321 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:35.369960 kernel: audit: type=1300 audit(1696280855.251:1264): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4e1b230 a2=3 a3=1 items=0 ppid=1 pid=3321 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:35.251000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:35.385309 kernel: audit: type=1327 audit(1696280855.251:1264): proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:35.387390 systemd-logind[1337]: New session 22 of user core. Oct 2 21:07:35.387870 systemd[1]: Started session-22.scope. Oct 2 21:07:35.390000 audit[3321]: USER_START pid=3321 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.422000 audit[3323]: CRED_ACQ pid=3323 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.454331 kernel: audit: type=1105 audit(1696280855.390:1265): pid=3321 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.454458 kernel: audit: type=1103 audit(1696280855.422:1266): pid=3323 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.751139 sshd[3321]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:35.751000 audit[3321]: USER_END pid=3321 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.755000 audit[3321]: CRED_DISP pid=3321 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.796623 systemd[1]: sshd@19-10.200.20.18:22-10.200.12.6:33600.service: Deactivated successfully. Oct 2 21:07:35.797463 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 21:07:35.800295 systemd-logind[1337]: Session 22 logged out. Waiting for processes to exit. Oct 2 21:07:35.801475 systemd-logind[1337]: Removed session 22. Oct 2 21:07:35.818532 kernel: audit: type=1106 audit(1696280855.751:1267): pid=3321 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.818671 kernel: audit: type=1104 audit(1696280855.755:1268): pid=3321 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.18:22-10.200.12.6:33600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:37.818914 kubelet[2513]: E1002 21:07:37.818884 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:42.820373 kubelet[2513]: E1002 21:07:42.820333 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:44.848403 kubelet[2513]: E1002 21:07:44.848296 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:07:45.827368 systemd[1]: Started sshd@20-10.200.20.18:22-10.200.12.6:49188.service. Oct 2 21:07:45.859079 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:07:45.859263 kernel: audit: type=1130 audit(1696280865.827:1270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.18:22-10.200.12.6:49188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:45.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.18:22-10.200.12.6:49188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:46.283000 audit[3333]: USER_ACCT pid=3333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.284980 sshd[3333]: Accepted publickey for core from 10.200.12.6 port 49188 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:46.289796 sshd[3333]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:46.288000 audit[3333]: CRED_ACQ pid=3333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.337738 kernel: audit: type=1101 audit(1696280866.283:1271): pid=3333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.337987 kernel: audit: type=1103 audit(1696280866.288:1272): pid=3333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.338024 kernel: audit: type=1006 audit(1696280866.288:1273): pid=3333 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 21:07:46.288000 audit[3333]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe87e5760 a2=3 a3=1 items=0 ppid=1 pid=3333 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:46.402719 kernel: audit: type=1300 audit(1696280866.288:1273): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe87e5760 a2=3 a3=1 items=0 ppid=1 pid=3333 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:46.288000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:46.411218 kernel: audit: type=1327 audit(1696280866.288:1273): proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:46.411979 systemd-logind[1337]: New session 23 of user core. Oct 2 21:07:46.412475 systemd[1]: Started session-23.scope. Oct 2 21:07:46.416000 audit[3333]: USER_START pid=3333 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.416000 audit[3335]: CRED_ACQ pid=3335 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.483632 kernel: audit: type=1105 audit(1696280866.416:1274): pid=3333 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.483812 kernel: audit: type=1103 audit(1696280866.416:1275): pid=3335 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.752907 sshd[3333]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:46.753000 audit[3333]: USER_END pid=3333 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.753000 audit[3333]: CRED_DISP pid=3333 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.798881 systemd[1]: sshd@20-10.200.20.18:22-10.200.12.6:49188.service: Deactivated successfully. Oct 2 21:07:46.799746 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 21:07:46.801821 systemd-logind[1337]: Session 23 logged out. Waiting for processes to exit. Oct 2 21:07:46.802787 systemd-logind[1337]: Removed session 23. Oct 2 21:07:46.820899 kernel: audit: type=1106 audit(1696280866.753:1276): pid=3333 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.821028 kernel: audit: type=1104 audit(1696280866.753:1277): pid=3333 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.18:22-10.200.12.6:49188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:47.821028 kubelet[2513]: E1002 21:07:47.821000 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:52.822711 kubelet[2513]: E1002 21:07:52.822687 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:55.846815 kubelet[2513]: E1002 21:07:55.846784 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:07:56.824908 systemd[1]: Started sshd@21-10.200.20.18:22-10.200.12.6:53696.service. Oct 2 21:07:56.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.18:22-10.200.12.6:53696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:56.831410 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:07:56.831518 kernel: audit: type=1130 audit(1696280876.825:1279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.18:22-10.200.12.6:53696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:57.239000 audit[3347]: USER_ACCT pid=3347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:57.240743 sshd[3347]: Accepted publickey for core from 10.200.12.6 port 53696 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:57.245154 sshd[3347]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:57.244000 audit[3347]: CRED_ACQ pid=3347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:57.292098 kernel: audit: type=1101 audit(1696280877.239:1280): pid=3347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:57.292200 kernel: audit: type=1103 audit(1696280877.244:1281): pid=3347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:57.306849 kernel: audit: type=1006 audit(1696280877.244:1282): pid=3347 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 21:07:57.244000 audit[3347]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0cd3600 a2=3 a3=1 items=0 ppid=1 pid=3347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:57.332301 kernel: audit: type=1300 audit(1696280877.244:1282): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0cd3600 a2=3 a3=1 items=0 ppid=1 pid=3347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:57.244000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:57.341261 kernel: audit: type=1327 audit(1696280877.244:1282): proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:57.344736 systemd[1]: Started session-24.scope. Oct 2 21:07:57.345234 systemd-logind[1337]: New session 24 of user core. Oct 2 21:07:57.349000 audit[3347]: USER_START pid=3347 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:57.349000 audit[3349]: CRED_ACQ pid=3349 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:57.400510 kernel: audit: type=1105 audit(1696280877.349:1283): pid=3347 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:57.400658 kernel: audit: type=1103 audit(1696280877.349:1284): pid=3349 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:57.686323 sshd[3347]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:57.686000 audit[3347]: USER_END pid=3347 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:57.690137 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 21:07:57.691079 systemd[1]: sshd@21-10.200.20.18:22-10.200.12.6:53696.service: Deactivated successfully. Oct 2 21:07:57.687000 audit[3347]: CRED_DISP pid=3347 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:57.737417 kernel: audit: type=1106 audit(1696280877.686:1285): pid=3347 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:57.737532 kernel: audit: type=1104 audit(1696280877.687:1286): pid=3347 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:57.737482 systemd-logind[1337]: Session 24 logged out. Waiting for processes to exit. Oct 2 21:07:57.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.18:22-10.200.12.6:53696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:57.738395 systemd-logind[1337]: Removed session 24. Oct 2 21:07:57.823797 kubelet[2513]: E1002 21:07:57.823756 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:58.676000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:58.676000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:58.676000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000a905c0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:07:58.676000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:58.676000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400105dfb0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:07:58.676000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:59.426000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:59.426000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400e59fa80 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:07:59.426000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:07:59.427000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:59.427000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4010332930 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:07:59.427000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:07:59.460000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:59.460000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4010332990 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:07:59.460000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:07:59.676000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:59.676000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40103329c0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:07:59.676000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:07:59.679000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:59.679000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400e59fc60 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:07:59.679000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:07:59.688000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:59.688000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40102b1bc0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:07:59.688000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:02.732109 kubelet[2513]: W1002 21:08:02.732068 2513 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:08:02.824837 kubelet[2513]: E1002 21:08:02.824816 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:06.847637 kubelet[2513]: E1002 21:08:06.847574 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:08:07.765284 systemd[1]: Started sshd@22-10.200.20.18:22-10.200.12.6:47664.service. Oct 2 21:08:07.800898 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 21:08:07.801000 kernel: audit: type=1130 audit(1696280887.765:1296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.18:22-10.200.12.6:47664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:07.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.18:22-10.200.12.6:47664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:07.825982 kubelet[2513]: E1002 21:08:07.825948 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:08.192000 audit[3360]: USER_ACCT pid=3360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:08.196292 sshd[3360]: Accepted publickey for core from 10.200.12.6 port 47664 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:08:08.197136 sshd[3360]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:08:08.192000 audit[3360]: CRED_ACQ pid=3360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:08.254819 kernel: audit: type=1101 audit(1696280888.192:1297): pid=3360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:08.254992 kernel: audit: type=1103 audit(1696280888.192:1298): pid=3360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:08.280272 kernel: audit: type=1006 audit(1696280888.192:1299): pid=3360 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 21:08:08.192000 audit[3360]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff39c7330 a2=3 a3=1 items=0 ppid=1 pid=3360 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:08.310096 kernel: audit: type=1300 audit(1696280888.192:1299): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff39c7330 a2=3 a3=1 items=0 ppid=1 pid=3360 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:08.192000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:08.319178 kernel: audit: type=1327 audit(1696280888.192:1299): proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:08.321035 systemd-logind[1337]: New session 25 of user core. Oct 2 21:08:08.321504 systemd[1]: Started session-25.scope. Oct 2 21:08:08.325000 audit[3360]: USER_START pid=3360 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:08.369705 kernel: audit: type=1105 audit(1696280888.325:1300): pid=3360 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:08.369844 kernel: audit: type=1103 audit(1696280888.367:1301): pid=3362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:08.367000 audit[3362]: CRED_ACQ pid=3362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:08.707093 sshd[3360]: pam_unix(sshd:session): session closed for user core Oct 2 21:08:08.707000 audit[3360]: USER_END pid=3360 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:08.736910 systemd[1]: sshd@22-10.200.20.18:22-10.200.12.6:47664.service: Deactivated successfully. Oct 2 21:08:08.737682 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 21:08:08.707000 audit[3360]: CRED_DISP pid=3360 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:08.739008 systemd-logind[1337]: Session 25 logged out. Waiting for processes to exit. Oct 2 21:08:08.775444 kernel: audit: type=1106 audit(1696280888.707:1302): pid=3360 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:08.775589 kernel: audit: type=1104 audit(1696280888.707:1303): pid=3360 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:08.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.18:22-10.200.12.6:47664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:08.776199 systemd-logind[1337]: Removed session 25. Oct 2 21:08:12.826888 kubelet[2513]: E1002 21:08:12.826856 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:13.794000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:13.801048 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:08:13.801183 kernel: audit: type=1400 audit(1696280893.794:1305): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:13.794000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c18f00 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:08:13.866411 kernel: audit: type=1300 audit(1696280893.794:1305): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c18f00 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:08:13.794000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:13.896599 kernel: audit: type=1327 audit(1696280893.794:1305): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:13.795000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:13.920072 kernel: audit: type=1400 audit(1696280893.795:1306): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:13.920198 kernel: audit: type=1300 audit(1696280893.795:1306): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000cedf20 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:08:13.795000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000cedf20 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:08:13.795000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:13.997927 kernel: audit: type=1327 audit(1696280893.795:1306): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:13.998080 kernel: audit: type=1400 audit(1696280893.798:1307): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:13.798000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:13.798000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d7c0a0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:08:14.064033 kernel: audit: type=1300 audit(1696280893.798:1307): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d7c0a0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:08:13.798000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:14.096823 kernel: audit: type=1327 audit(1696280893.798:1307): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:14.096959 kernel: audit: type=1400 audit(1696280893.800:1308): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:13.800000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:13.800000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c19020 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:08:13.800000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:17.828270 kubelet[2513]: E1002 21:08:17.828245 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:18.784073 systemd[1]: Started sshd@23-10.200.20.18:22-10.200.12.6:34642.service. Oct 2 21:08:18.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.18:22-10.200.12.6:34642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:19.236000 audit[3373]: USER_ACCT pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:19.237683 sshd[3373]: Accepted publickey for core from 10.200.12.6 port 34642 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:08:19.242383 sshd[3373]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:08:19.246484 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 21:08:19.246658 kernel: audit: type=1101 audit(1696280899.236:1310): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:19.283928 kernel: audit: type=1103 audit(1696280899.236:1311): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:19.236000 audit[3373]: CRED_ACQ pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:19.323733 kernel: audit: type=1006 audit(1696280899.236:1312): pid=3373 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 21:08:19.323959 systemd[1]: Started session-26.scope. Oct 2 21:08:19.324733 systemd-logind[1337]: New session 26 of user core. Oct 2 21:08:19.236000 audit[3373]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9fa4e40 a2=3 a3=1 items=0 ppid=1 pid=3373 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:19.362725 kernel: audit: type=1300 audit(1696280899.236:1312): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9fa4e40 a2=3 a3=1 items=0 ppid=1 pid=3373 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:19.236000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:19.376954 kernel: audit: type=1327 audit(1696280899.236:1312): proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:19.377000 audit[3373]: USER_START pid=3373 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:19.405841 kernel: audit: type=1105 audit(1696280899.377:1313): pid=3373 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:19.381000 audit[3375]: CRED_ACQ pid=3375 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:19.428459 kernel: audit: type=1103 audit(1696280899.381:1314): pid=3375 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:19.714397 sshd[3373]: pam_unix(sshd:session): session closed for user core Oct 2 21:08:19.714000 audit[3373]: USER_END pid=3373 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:19.718173 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 21:08:19.718961 systemd[1]: sshd@23-10.200.20.18:22-10.200.12.6:34642.service: Deactivated successfully. Oct 2 21:08:19.720620 systemd-logind[1337]: Session 26 logged out. Waiting for processes to exit. Oct 2 21:08:19.721494 systemd-logind[1337]: Removed session 26. Oct 2 21:08:19.716000 audit[3373]: CRED_DISP pid=3373 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:19.780456 kernel: audit: type=1106 audit(1696280899.714:1315): pid=3373 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:19.780571 kernel: audit: type=1104 audit(1696280899.716:1316): pid=3373 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:19.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.18:22-10.200.12.6:34642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:19.802962 kernel: audit: type=1131 audit(1696280899.718:1317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.18:22-10.200.12.6:34642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:20.847259 kubelet[2513]: E1002 21:08:20.847215 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:08:22.829419 kubelet[2513]: E1002 21:08:22.829377 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:27.830307 kubelet[2513]: E1002 21:08:27.830282 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:29.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.18:22-10.200.12.6:60674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:29.786132 systemd[1]: Started sshd@24-10.200.20.18:22-10.200.12.6:60674.service. Oct 2 21:08:29.809651 kernel: audit: type=1130 audit(1696280909.784:1318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.18:22-10.200.12.6:60674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:30.199000 audit[3384]: USER_ACCT pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:30.201139 sshd[3384]: Accepted publickey for core from 10.200.12.6 port 60674 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:08:30.203182 sshd[3384]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:08:30.201000 audit[3384]: CRED_ACQ pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:30.233040 systemd[1]: Started session-27.scope. Oct 2 21:08:30.234501 systemd-logind[1337]: New session 27 of user core. Oct 2 21:08:30.269189 kernel: audit: type=1101 audit(1696280910.199:1319): pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:30.269332 kernel: audit: type=1103 audit(1696280910.201:1320): pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:30.293406 kernel: audit: type=1006 audit(1696280910.201:1321): pid=3384 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 21:08:30.201000 audit[3384]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd182160 a2=3 a3=1 items=0 ppid=1 pid=3384 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:30.323185 kernel: audit: type=1300 audit(1696280910.201:1321): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd182160 a2=3 a3=1 items=0 ppid=1 pid=3384 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:30.201000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:30.332867 kernel: audit: type=1327 audit(1696280910.201:1321): proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:30.332974 kernel: audit: type=1105 audit(1696280910.238:1322): pid=3384 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:30.238000 audit[3384]: USER_START pid=3384 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:30.250000 audit[3386]: CRED_ACQ pid=3386 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:30.409228 kernel: audit: type=1103 audit(1696280910.250:1323): pid=3386 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:30.603466 sshd[3384]: pam_unix(sshd:session): session closed for user core Oct 2 21:08:30.603000 audit[3384]: USER_END pid=3384 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:30.608811 systemd-logind[1337]: Session 27 logged out. Waiting for processes to exit. Oct 2 21:08:30.611488 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 21:08:30.612897 systemd-logind[1337]: Removed session 27. Oct 2 21:08:30.613684 systemd[1]: sshd@24-10.200.20.18:22-10.200.12.6:60674.service: Deactivated successfully. Oct 2 21:08:30.603000 audit[3384]: CRED_DISP pid=3384 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:30.674503 kernel: audit: type=1106 audit(1696280910.603:1324): pid=3384 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:30.674671 kernel: audit: type=1104 audit(1696280910.603:1325): pid=3384 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:30.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.18:22-10.200.12.6:60674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:32.832217 kubelet[2513]: E1002 21:08:32.832186 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:34.848752 kubelet[2513]: E1002 21:08:34.848701 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:08:37.833299 kubelet[2513]: E1002 21:08:37.833275 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:40.688083 systemd[1]: Started sshd@25-10.200.20.18:22-10.200.12.6:33686.service. Oct 2 21:08:40.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.18:22-10.200.12.6:33686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:40.694965 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:08:40.695037 kernel: audit: type=1130 audit(1696280920.687:1327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.18:22-10.200.12.6:33686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:41.143000 audit[3396]: USER_ACCT pid=3396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:41.144941 sshd[3396]: Accepted publickey for core from 10.200.12.6 port 33686 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:08:41.148471 sshd[3396]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:08:41.155414 systemd[1]: Started session-28.scope. Oct 2 21:08:41.156923 systemd-logind[1337]: New session 28 of user core. Oct 2 21:08:41.146000 audit[3396]: CRED_ACQ pid=3396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:41.210556 kernel: audit: type=1101 audit(1696280921.143:1328): pid=3396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:41.210679 kernel: audit: type=1103 audit(1696280921.146:1329): pid=3396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:41.224946 kernel: audit: type=1006 audit(1696280921.146:1330): pid=3396 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 21:08:41.225047 kernel: audit: type=1300 audit(1696280921.146:1330): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8b74e10 a2=3 a3=1 items=0 ppid=1 pid=3396 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:41.146000 audit[3396]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8b74e10 a2=3 a3=1 items=0 ppid=1 pid=3396 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:41.146000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:41.272386 kernel: audit: type=1327 audit(1696280921.146:1330): proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:41.272583 kernel: audit: type=1105 audit(1696280921.159:1331): pid=3396 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:41.159000 audit[3396]: USER_START pid=3396 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:41.173000 audit[3398]: CRED_ACQ pid=3398 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:41.329816 kernel: audit: type=1103 audit(1696280921.173:1332): pid=3398 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:41.552802 sshd[3396]: pam_unix(sshd:session): session closed for user core Oct 2 21:08:41.552000 audit[3396]: USER_END pid=3396 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:41.556356 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 21:08:41.557234 systemd[1]: sshd@25-10.200.20.18:22-10.200.12.6:33686.service: Deactivated successfully. Oct 2 21:08:41.552000 audit[3396]: CRED_DISP pid=3396 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:41.603871 kernel: audit: type=1106 audit(1696280921.552:1333): pid=3396 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:41.603977 kernel: audit: type=1104 audit(1696280921.552:1334): pid=3396 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:41.555000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.18:22-10.200.12.6:33686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:41.604230 systemd-logind[1337]: Session 28 logged out. Waiting for processes to exit. Oct 2 21:08:41.604935 systemd-logind[1337]: Removed session 28. Oct 2 21:08:42.835061 kubelet[2513]: E1002 21:08:42.835038 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:46.847734 kubelet[2513]: E1002 21:08:46.847309 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:08:47.836969 kubelet[2513]: E1002 21:08:47.836930 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:51.669129 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:08:51.669304 kernel: audit: type=1130 audit(1696280931.621:1336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.18:22-10.200.12.6:60028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:51.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.18:22-10.200.12.6:60028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:51.622804 systemd[1]: Started sshd@26-10.200.20.18:22-10.200.12.6:60028.service. Oct 2 21:08:52.043000 audit[3409]: USER_ACCT pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:52.045250 sshd[3409]: Accepted publickey for core from 10.200.12.6 port 60028 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:08:52.071734 sshd[3409]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:08:52.069000 audit[3409]: CRED_ACQ pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:52.095268 kernel: audit: type=1101 audit(1696280932.043:1337): pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:52.095372 kernel: audit: type=1103 audit(1696280932.069:1338): pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:52.109970 kernel: audit: type=1006 audit(1696280932.069:1339): pid=3409 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 21:08:52.098648 systemd[1]: Started session-29.scope. Oct 2 21:08:52.099817 systemd-logind[1337]: New session 29 of user core. Oct 2 21:08:52.069000 audit[3409]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc33e74d0 a2=3 a3=1 items=0 ppid=1 pid=3409 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:52.135737 kernel: audit: type=1300 audit(1696280932.069:1339): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc33e74d0 a2=3 a3=1 items=0 ppid=1 pid=3409 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:52.069000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:52.144051 kernel: audit: type=1327 audit(1696280932.069:1339): proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:52.103000 audit[3409]: USER_START pid=3409 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:52.192925 kernel: audit: type=1105 audit(1696280932.103:1340): pid=3409 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:52.106000 audit[3411]: CRED_ACQ pid=3411 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:52.215421 kernel: audit: type=1103 audit(1696280932.106:1341): pid=3411 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:52.429093 sshd[3409]: pam_unix(sshd:session): session closed for user core Oct 2 21:08:52.429000 audit[3409]: USER_END pid=3409 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:52.433091 systemd-logind[1337]: Session 29 logged out. Waiting for processes to exit. Oct 2 21:08:52.435008 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 21:08:52.436761 systemd-logind[1337]: Removed session 29. Oct 2 21:08:52.441869 systemd[1]: sshd@26-10.200.20.18:22-10.200.12.6:60028.service: Deactivated successfully. Oct 2 21:08:52.429000 audit[3409]: CRED_DISP pid=3409 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:52.495873 kernel: audit: type=1106 audit(1696280932.429:1342): pid=3409 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:52.496054 kernel: audit: type=1104 audit(1696280932.429:1343): pid=3409 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:52.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.18:22-10.200.12.6:60028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:52.838497 kubelet[2513]: E1002 21:08:52.838454 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:57.839711 kubelet[2513]: E1002 21:08:57.839665 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:58.677000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:58.684626 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:08:58.684748 kernel: audit: type=1400 audit(1696280938.677:1345): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:58.677000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400169c0f0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:08:58.737673 kernel: audit: type=1300 audit(1696280938.677:1345): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400169c0f0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:08:58.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:58.784641 kernel: audit: type=1327 audit(1696280938.677:1345): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:58.678000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:58.807821 kernel: audit: type=1400 audit(1696280938.678:1346): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:58.807948 kernel: audit: type=1300 audit(1696280938.678:1346): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002173380 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:08:58.678000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002173380 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:08:58.678000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:58.871939 kernel: audit: type=1327 audit(1696280938.678:1346): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:59.427000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:59.427000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400240b160 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:08:59.499455 kernel: audit: type=1400 audit(1696280939.427:1347): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:59.499579 kernel: audit: type=1300 audit(1696280939.427:1347): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400240b160 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:08:59.427000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:59.525190 kernel: audit: type=1327 audit(1696280939.427:1347): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:59.428000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:59.558212 kernel: audit: type=1400 audit(1696280939.428:1348): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:59.428000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4007b7baa0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:08:59.428000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:59.458000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:59.458000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40077cb170 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:08:59.458000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:59.677000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:59.677000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40077cb6b0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:08:59.677000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:59.679000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:59.679000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40023d0460 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:08:59.679000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:59.689000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:59.689000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40077cb7d0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:08:59.689000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:59.847517 kubelet[2513]: E1002 21:08:59.847481 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-skj25_kube-system(fcb0e641-2ff2-4819-a476-1102c29b81ac)\"" pod="kube-system/cilium-skj25" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac Oct 2 21:09:02.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.18:22-10.200.12.6:50204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:02.505929 systemd[1]: Started sshd@27-10.200.20.18:22-10.200.12.6:50204.service. Oct 2 21:09:02.840539 kubelet[2513]: E1002 21:09:02.840512 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:02.954000 audit[3421]: USER_ACCT pid=3421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:02.956718 sshd[3421]: Accepted publickey for core from 10.200.12.6 port 50204 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:09:02.959000 audit[3421]: CRED_ACQ pid=3421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:02.959000 audit[3421]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcee6a3c0 a2=3 a3=1 items=0 ppid=1 pid=3421 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:02.959000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:02.960360 sshd[3421]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:09:02.965935 systemd-logind[1337]: New session 30 of user core. Oct 2 21:09:02.967913 systemd[1]: Started session-30.scope. Oct 2 21:09:02.973000 audit[3421]: USER_START pid=3421 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:02.981000 audit[3425]: CRED_ACQ pid=3425 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:03.357113 sshd[3421]: pam_unix(sshd:session): session closed for user core Oct 2 21:09:03.357000 audit[3421]: USER_END pid=3421 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:03.358000 audit[3421]: CRED_DISP pid=3421 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:03.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.18:22-10.200.12.6:50204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:03.365379 systemd[1]: sshd@27-10.200.20.18:22-10.200.12.6:50204.service: Deactivated successfully. Oct 2 21:09:03.366550 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 21:09:03.367422 systemd-logind[1337]: Session 30 logged out. Waiting for processes to exit. Oct 2 21:09:03.368498 systemd-logind[1337]: Removed session 30. Oct 2 21:09:03.426356 systemd[1]: Started sshd@28-10.200.20.18:22-10.200.12.6:50218.service. Oct 2 21:09:03.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.18:22-10.200.12.6:50218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:03.843000 audit[3435]: USER_ACCT pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:03.849855 sshd[3435]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:09:03.852767 sshd[3435]: Accepted publickey for core from 10.200.12.6 port 50218 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:09:03.855574 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 21:09:03.855677 kernel: audit: type=1101 audit(1696280943.843:1363): pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:03.848000 audit[3435]: CRED_ACQ pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:03.916944 kernel: audit: type=1103 audit(1696280943.848:1364): pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:03.919787 systemd[1]: Started session-31.scope. Oct 2 21:09:03.920347 systemd-logind[1337]: New session 31 of user core. Oct 2 21:09:03.931329 kernel: audit: type=1006 audit(1696280943.848:1365): pid=3435 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=31 res=1 Oct 2 21:09:03.848000 audit[3435]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4e4f320 a2=3 a3=1 items=0 ppid=1 pid=3435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:03.979785 kernel: audit: type=1300 audit(1696280943.848:1365): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4e4f320 a2=3 a3=1 items=0 ppid=1 pid=3435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:03.980149 kernel: audit: type=1327 audit(1696280943.848:1365): proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:03.848000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:03.931000 audit[3435]: USER_START pid=3435 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:04.017481 kernel: audit: type=1105 audit(1696280943.931:1366): pid=3435 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:04.017817 kernel: audit: type=1103 audit(1696280943.934:1367): pid=3437 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:03.934000 audit[3437]: CRED_ACQ pid=3437 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:07.539279 env[1352]: time="2023-10-02T21:09:07.539065764Z" level=info msg="StopPodSandbox for \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\"" Oct 2 21:09:07.539279 env[1352]: time="2023-10-02T21:09:07.539154602Z" level=info msg="Container to stop \"519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:09:07.543376 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56-shm.mount: Deactivated successfully. Oct 2 21:09:07.562629 env[1352]: time="2023-10-02T21:09:07.562537978Z" level=info msg="StopContainer for \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\" with timeout 30 (s)" Oct 2 21:09:07.563367 env[1352]: time="2023-10-02T21:09:07.563305925Z" level=info msg="Stop container \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\" with signal terminated" Oct 2 21:09:07.582000 audit: BPF prog-id=114 op=UNLOAD Oct 2 21:09:07.583126 systemd[1]: cri-containerd-87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56.scope: Deactivated successfully. Oct 2 21:09:07.594051 kernel: audit: type=1334 audit(1696280947.582:1368): prog-id=114 op=UNLOAD Oct 2 21:09:07.594166 kernel: audit: type=1334 audit(1696280947.593:1369): prog-id=117 op=UNLOAD Oct 2 21:09:07.593000 audit: BPF prog-id=117 op=UNLOAD Oct 2 21:09:07.605109 systemd[1]: cri-containerd-611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae.scope: Deactivated successfully. Oct 2 21:09:07.604000 audit: BPF prog-id=125 op=UNLOAD Oct 2 21:09:07.614000 audit: BPF prog-id=128 op=UNLOAD Oct 2 21:09:07.616618 kernel: audit: type=1334 audit(1696280947.604:1370): prog-id=125 op=UNLOAD Oct 2 21:09:07.634545 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56-rootfs.mount: Deactivated successfully. Oct 2 21:09:07.644508 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae-rootfs.mount: Deactivated successfully. Oct 2 21:09:07.715062 env[1352]: time="2023-10-02T21:09:07.714919513Z" level=info msg="shim disconnected" id=611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae Oct 2 21:09:07.715062 env[1352]: time="2023-10-02T21:09:07.714975353Z" level=warning msg="cleaning up after shim disconnected" id=611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae namespace=k8s.io Oct 2 21:09:07.715062 env[1352]: time="2023-10-02T21:09:07.714985672Z" level=info msg="cleaning up dead shim" Oct 2 21:09:07.715984 env[1352]: time="2023-10-02T21:09:07.715952536Z" level=info msg="shim disconnected" id=87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56 Oct 2 21:09:07.716340 env[1352]: time="2023-10-02T21:09:07.716318850Z" level=warning msg="cleaning up after shim disconnected" id=87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56 namespace=k8s.io Oct 2 21:09:07.716469 env[1352]: time="2023-10-02T21:09:07.716453208Z" level=info msg="cleaning up dead shim" Oct 2 21:09:07.733129 env[1352]: time="2023-10-02T21:09:07.733079975Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3482 runtime=io.containerd.runc.v2\n" Oct 2 21:09:07.735774 env[1352]: time="2023-10-02T21:09:07.735747731Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3483 runtime=io.containerd.runc.v2\n" Oct 2 21:09:07.738140 env[1352]: time="2023-10-02T21:09:07.738111132Z" level=info msg="TearDown network for sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" successfully" Oct 2 21:09:07.738257 env[1352]: time="2023-10-02T21:09:07.738238650Z" level=info msg="StopPodSandbox for \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" returns successfully" Oct 2 21:09:07.739916 env[1352]: time="2023-10-02T21:09:07.739853104Z" level=info msg="StopContainer for \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\" returns successfully" Oct 2 21:09:07.742285 env[1352]: time="2023-10-02T21:09:07.742247624Z" level=info msg="StopPodSandbox for \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\"" Oct 2 21:09:07.742476 env[1352]: time="2023-10-02T21:09:07.742455901Z" level=info msg="Container to stop \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:09:07.745647 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d-shm.mount: Deactivated successfully. Oct 2 21:09:07.766000 audit: BPF prog-id=118 op=UNLOAD Oct 2 21:09:07.767046 systemd[1]: cri-containerd-5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d.scope: Deactivated successfully. Oct 2 21:09:07.770000 audit: BPF prog-id=121 op=UNLOAD Oct 2 21:09:07.797809 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d-rootfs.mount: Deactivated successfully. Oct 2 21:09:07.807474 kubelet[2513]: I1002 21:09:07.806160 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-cilium-cgroup\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.807474 kubelet[2513]: I1002 21:09:07.806200 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-lib-modules\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.807474 kubelet[2513]: I1002 21:09:07.806212 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:07.807474 kubelet[2513]: I1002 21:09:07.806222 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-hostproc\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.807474 kubelet[2513]: I1002 21:09:07.806278 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:07.807926 kubelet[2513]: I1002 21:09:07.806244 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-hostproc" (OuterVolumeSpecName: "hostproc") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:07.807926 kubelet[2513]: I1002 21:09:07.806300 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-host-proc-sys-net\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.807926 kubelet[2513]: I1002 21:09:07.806341 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/fcb0e641-2ff2-4819-a476-1102c29b81ac-clustermesh-secrets\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.807926 kubelet[2513]: I1002 21:09:07.806360 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-cni-path\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.807926 kubelet[2513]: I1002 21:09:07.806376 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-bpf-maps\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.807926 kubelet[2513]: I1002 21:09:07.806375 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:07.808093 kubelet[2513]: I1002 21:09:07.806409 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/fcb0e641-2ff2-4819-a476-1102c29b81ac-cilium-config-path\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.808093 kubelet[2513]: I1002 21:09:07.806427 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-cilium-run\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.808093 kubelet[2513]: I1002 21:09:07.806447 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-8xvxb\" (UniqueName: \"kubernetes.io/projected/fcb0e641-2ff2-4819-a476-1102c29b81ac-kube-api-access-8xvxb\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.808093 kubelet[2513]: I1002 21:09:07.806464 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-host-proc-sys-kernel\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.808093 kubelet[2513]: I1002 21:09:07.806497 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/fcb0e641-2ff2-4819-a476-1102c29b81ac-hubble-tls\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.808093 kubelet[2513]: I1002 21:09:07.806514 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-xtables-lock\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.808229 kubelet[2513]: I1002 21:09:07.806530 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-etc-cni-netd\") pod \"fcb0e641-2ff2-4819-a476-1102c29b81ac\" (UID: \"fcb0e641-2ff2-4819-a476-1102c29b81ac\") " Oct 2 21:09:07.808229 kubelet[2513]: I1002 21:09:07.806577 2513 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-lib-modules\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.808229 kubelet[2513]: I1002 21:09:07.806588 2513 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-hostproc\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.808229 kubelet[2513]: I1002 21:09:07.806621 2513 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-host-proc-sys-net\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.808229 kubelet[2513]: I1002 21:09:07.806632 2513 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-cilium-cgroup\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.808229 kubelet[2513]: I1002 21:09:07.806653 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:07.808369 kubelet[2513]: I1002 21:09:07.806675 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-cni-path" (OuterVolumeSpecName: "cni-path") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:07.808369 kubelet[2513]: I1002 21:09:07.806701 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:07.808369 kubelet[2513]: W1002 21:09:07.806835 2513 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/fcb0e641-2ff2-4819-a476-1102c29b81ac/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 21:09:07.808369 kubelet[2513]: I1002 21:09:07.806963 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:07.808369 kubelet[2513]: I1002 21:09:07.806992 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:07.809960 kubelet[2513]: I1002 21:09:07.809933 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/fcb0e641-2ff2-4819-a476-1102c29b81ac-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:09:07.810403 kubelet[2513]: I1002 21:09:07.810383 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:07.810747 kubelet[2513]: I1002 21:09:07.810728 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/fcb0e641-2ff2-4819-a476-1102c29b81ac-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:09:07.813870 env[1352]: time="2023-10-02T21:09:07.813819648Z" level=info msg="shim disconnected" id=5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d Oct 2 21:09:07.813870 env[1352]: time="2023-10-02T21:09:07.813867247Z" level=warning msg="cleaning up after shim disconnected" id=5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d namespace=k8s.io Oct 2 21:09:07.814035 env[1352]: time="2023-10-02T21:09:07.813877647Z" level=info msg="cleaning up dead shim" Oct 2 21:09:07.817396 kubelet[2513]: I1002 21:09:07.816579 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/fcb0e641-2ff2-4819-a476-1102c29b81ac-kube-api-access-8xvxb" (OuterVolumeSpecName: "kube-api-access-8xvxb") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "kube-api-access-8xvxb". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:09:07.820372 kubelet[2513]: I1002 21:09:07.820346 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/fcb0e641-2ff2-4819-a476-1102c29b81ac-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "fcb0e641-2ff2-4819-a476-1102c29b81ac" (UID: "fcb0e641-2ff2-4819-a476-1102c29b81ac"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:09:07.829297 env[1352]: time="2023-10-02T21:09:07.829243795Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3529 runtime=io.containerd.runc.v2\n" Oct 2 21:09:07.829579 env[1352]: time="2023-10-02T21:09:07.829545590Z" level=info msg="TearDown network for sandbox \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\" successfully" Oct 2 21:09:07.829579 env[1352]: time="2023-10-02T21:09:07.829574069Z" level=info msg="StopPodSandbox for \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\" returns successfully" Oct 2 21:09:07.841808 kubelet[2513]: E1002 21:09:07.841782 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:07.907395 kubelet[2513]: I1002 21:09:07.907365 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-h5w95\" (UniqueName: \"kubernetes.io/projected/890a0174-f93a-4e12-9d05-ab0111cba452-kube-api-access-h5w95\") pod \"890a0174-f93a-4e12-9d05-ab0111cba452\" (UID: \"890a0174-f93a-4e12-9d05-ab0111cba452\") " Oct 2 21:09:07.907579 kubelet[2513]: I1002 21:09:07.907569 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/890a0174-f93a-4e12-9d05-ab0111cba452-cilium-config-path\") pod \"890a0174-f93a-4e12-9d05-ab0111cba452\" (UID: \"890a0174-f93a-4e12-9d05-ab0111cba452\") " Oct 2 21:09:07.907706 kubelet[2513]: I1002 21:09:07.907695 2513 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/fcb0e641-2ff2-4819-a476-1102c29b81ac-clustermesh-secrets\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.907773 kubelet[2513]: I1002 21:09:07.907765 2513 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-cni-path\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.907830 kubelet[2513]: I1002 21:09:07.907822 2513 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-bpf-maps\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.907892 kubelet[2513]: I1002 21:09:07.907883 2513 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-cilium-run\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.907945 kubelet[2513]: I1002 21:09:07.907938 2513 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/fcb0e641-2ff2-4819-a476-1102c29b81ac-cilium-config-path\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.908049 kubelet[2513]: I1002 21:09:07.908040 2513 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-etc-cni-netd\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.908115 kubelet[2513]: I1002 21:09:07.908107 2513 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-8xvxb\" (UniqueName: \"kubernetes.io/projected/fcb0e641-2ff2-4819-a476-1102c29b81ac-kube-api-access-8xvxb\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.908196 kubelet[2513]: I1002 21:09:07.908186 2513 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.908261 kubelet[2513]: I1002 21:09:07.908252 2513 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/fcb0e641-2ff2-4819-a476-1102c29b81ac-hubble-tls\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.908320 kubelet[2513]: I1002 21:09:07.908312 2513 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/fcb0e641-2ff2-4819-a476-1102c29b81ac-xtables-lock\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:07.908586 kubelet[2513]: W1002 21:09:07.908556 2513 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/890a0174-f93a-4e12-9d05-ab0111cba452/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 21:09:07.911045 kubelet[2513]: I1002 21:09:07.911018 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/890a0174-f93a-4e12-9d05-ab0111cba452-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "890a0174-f93a-4e12-9d05-ab0111cba452" (UID: "890a0174-f93a-4e12-9d05-ab0111cba452"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:09:07.914108 kubelet[2513]: I1002 21:09:07.914082 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/890a0174-f93a-4e12-9d05-ab0111cba452-kube-api-access-h5w95" (OuterVolumeSpecName: "kube-api-access-h5w95") pod "890a0174-f93a-4e12-9d05-ab0111cba452" (UID: "890a0174-f93a-4e12-9d05-ab0111cba452"). InnerVolumeSpecName "kube-api-access-h5w95". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:09:08.009321 kubelet[2513]: I1002 21:09:08.009285 2513 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-h5w95\" (UniqueName: \"kubernetes.io/projected/890a0174-f93a-4e12-9d05-ab0111cba452-kube-api-access-h5w95\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:08.009511 kubelet[2513]: I1002 21:09:08.009500 2513 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/890a0174-f93a-4e12-9d05-ab0111cba452-cilium-config-path\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:09:08.542720 systemd[1]: var-lib-kubelet-pods-890a0174\x2df93a\x2d4e12\x2d9d05\x2dab0111cba452-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dh5w95.mount: Deactivated successfully. Oct 2 21:09:08.542837 systemd[1]: var-lib-kubelet-pods-fcb0e641\x2d2ff2\x2d4819\x2da476\x2d1102c29b81ac-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d8xvxb.mount: Deactivated successfully. Oct 2 21:09:08.542901 systemd[1]: var-lib-kubelet-pods-fcb0e641\x2d2ff2\x2d4819\x2da476\x2d1102c29b81ac-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 21:09:08.542968 systemd[1]: var-lib-kubelet-pods-fcb0e641\x2d2ff2\x2d4819\x2da476\x2d1102c29b81ac-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 21:09:08.705738 kubelet[2513]: I1002 21:09:08.705704 2513 scope.go:115] "RemoveContainer" containerID="611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae" Oct 2 21:09:08.708685 env[1352]: time="2023-10-02T21:09:08.708216333Z" level=info msg="RemoveContainer for \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\"" Oct 2 21:09:08.710224 systemd[1]: Removed slice kubepods-besteffort-pod890a0174_f93a_4e12_9d05_ab0111cba452.slice. Oct 2 21:09:08.714375 systemd[1]: Removed slice kubepods-burstable-podfcb0e641_2ff2_4819_a476_1102c29b81ac.slice. Oct 2 21:09:08.719951 env[1352]: time="2023-10-02T21:09:08.719874501Z" level=info msg="RemoveContainer for \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\" returns successfully" Oct 2 21:09:08.720267 kubelet[2513]: I1002 21:09:08.720252 2513 scope.go:115] "RemoveContainer" containerID="611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae" Oct 2 21:09:08.720634 env[1352]: time="2023-10-02T21:09:08.720501931Z" level=error msg="ContainerStatus for \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\": not found" Oct 2 21:09:08.720988 kubelet[2513]: E1002 21:09:08.720974 2513 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\": not found" containerID="611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae" Oct 2 21:09:08.721994 kubelet[2513]: I1002 21:09:08.721979 2513 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae} err="failed to get container status \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\": rpc error: code = NotFound desc = an error occurred when try to find container \"611bc551fd54aa69c7aa87b4da79f055879261e7c6b709ed0ad98cef09a50eae\": not found" Oct 2 21:09:08.722063 kubelet[2513]: I1002 21:09:08.722054 2513 scope.go:115] "RemoveContainer" containerID="519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d" Oct 2 21:09:08.723616 env[1352]: time="2023-10-02T21:09:08.723418083Z" level=info msg="RemoveContainer for \"519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d\"" Oct 2 21:09:08.730524 env[1352]: time="2023-10-02T21:09:08.730481247Z" level=info msg="RemoveContainer for \"519db4ea9fb90a9414e59cf93426690ad4f281b277a137d2288eeb766b612e2d\" returns successfully" Oct 2 21:09:08.850792 kubelet[2513]: I1002 21:09:08.849940 2513 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=890a0174-f93a-4e12-9d05-ab0111cba452 path="/var/lib/kubelet/pods/890a0174-f93a-4e12-9d05-ab0111cba452/volumes" Oct 2 21:09:08.851776 kubelet[2513]: I1002 21:09:08.851757 2513 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=fcb0e641-2ff2-4819-a476-1102c29b81ac path="/var/lib/kubelet/pods/fcb0e641-2ff2-4819-a476-1102c29b81ac/volumes" Oct 2 21:09:09.570007 sshd[3435]: pam_unix(sshd:session): session closed for user core Oct 2 21:09:09.573000 audit[3435]: USER_END pid=3435 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:09.580681 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 21:09:09.580848 kernel: audit: type=1106 audit(1696280949.573:1374): pid=3435 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:09.581343 systemd[1]: sshd@28-10.200.20.18:22-10.200.12.6:50218.service: Deactivated successfully. Oct 2 21:09:09.582141 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 21:09:09.582312 systemd[1]: session-31.scope: Consumed 2.794s CPU time. Oct 2 21:09:09.583509 systemd-logind[1337]: Session 31 logged out. Waiting for processes to exit. Oct 2 21:09:09.584623 systemd-logind[1337]: Removed session 31. Oct 2 21:09:09.573000 audit[3435]: CRED_DISP pid=3435 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:09.629744 kernel: audit: type=1104 audit(1696280949.573:1375): pid=3435 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:09.629902 kernel: audit: type=1131 audit(1696280949.580:1376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.18:22-10.200.12.6:50218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:09.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.18:22-10.200.12.6:50218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:09.664343 systemd[1]: Started sshd@29-10.200.20.18:22-10.200.12.6:52488.service. Oct 2 21:09:09.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.18:22-10.200.12.6:52488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:09.693129 kernel: audit: type=1130 audit(1696280949.664:1377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.18:22-10.200.12.6:52488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:10.127000 audit[3545]: USER_ACCT pid=3545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:10.129657 sshd[3545]: Accepted publickey for core from 10.200.12.6 port 52488 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:09:10.131991 sshd[3545]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:09:10.127000 audit[3545]: CRED_ACQ pid=3545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:10.194892 kernel: audit: type=1101 audit(1696280950.127:1378): pid=3545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:10.195082 kernel: audit: type=1103 audit(1696280950.127:1379): pid=3545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:10.209467 kernel: audit: type=1006 audit(1696280950.127:1380): pid=3545 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 21:09:10.127000 audit[3545]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff653dd70 a2=3 a3=1 items=0 ppid=1 pid=3545 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:10.234790 kernel: audit: type=1300 audit(1696280950.127:1380): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff653dd70 a2=3 a3=1 items=0 ppid=1 pid=3545 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:10.127000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:10.250166 kernel: audit: type=1327 audit(1696280950.127:1380): proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:10.253080 systemd-logind[1337]: New session 32 of user core. Oct 2 21:09:10.254030 systemd[1]: Started session-32.scope. Oct 2 21:09:10.258000 audit[3545]: USER_START pid=3545 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:10.296000 audit[3547]: CRED_ACQ pid=3547 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:10.297625 kernel: audit: type=1105 audit(1696280950.258:1381): pid=3545 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:11.182388 kubelet[2513]: I1002 21:09:11.182352 2513 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:09:11.182808 kubelet[2513]: E1002 21:09:11.182792 2513 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="fcb0e641-2ff2-4819-a476-1102c29b81ac" containerName="mount-cgroup" Oct 2 21:09:11.182895 kubelet[2513]: E1002 21:09:11.182885 2513 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="fcb0e641-2ff2-4819-a476-1102c29b81ac" containerName="mount-cgroup" Oct 2 21:09:11.182953 kubelet[2513]: E1002 21:09:11.182945 2513 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="890a0174-f93a-4e12-9d05-ab0111cba452" containerName="cilium-operator" Oct 2 21:09:11.183007 kubelet[2513]: E1002 21:09:11.182999 2513 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="fcb0e641-2ff2-4819-a476-1102c29b81ac" containerName="mount-cgroup" Oct 2 21:09:11.183068 kubelet[2513]: E1002 21:09:11.183061 2513 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="fcb0e641-2ff2-4819-a476-1102c29b81ac" containerName="mount-cgroup" Oct 2 21:09:11.183227 kubelet[2513]: E1002 21:09:11.183215 2513 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="fcb0e641-2ff2-4819-a476-1102c29b81ac" containerName="mount-cgroup" Oct 2 21:09:11.183305 kubelet[2513]: I1002 21:09:11.183295 2513 memory_manager.go:346] "RemoveStaleState removing state" podUID="fcb0e641-2ff2-4819-a476-1102c29b81ac" containerName="mount-cgroup" Oct 2 21:09:11.183357 kubelet[2513]: I1002 21:09:11.183349 2513 memory_manager.go:346] "RemoveStaleState removing state" podUID="890a0174-f93a-4e12-9d05-ab0111cba452" containerName="cilium-operator" Oct 2 21:09:11.183408 kubelet[2513]: I1002 21:09:11.183401 2513 memory_manager.go:346] "RemoveStaleState removing state" podUID="fcb0e641-2ff2-4819-a476-1102c29b81ac" containerName="mount-cgroup" Oct 2 21:09:11.183459 kubelet[2513]: I1002 21:09:11.183452 2513 memory_manager.go:346] "RemoveStaleState removing state" podUID="fcb0e641-2ff2-4819-a476-1102c29b81ac" containerName="mount-cgroup" Oct 2 21:09:11.183514 kubelet[2513]: I1002 21:09:11.183507 2513 memory_manager.go:346] "RemoveStaleState removing state" podUID="fcb0e641-2ff2-4819-a476-1102c29b81ac" containerName="mount-cgroup" Oct 2 21:09:11.183580 kubelet[2513]: E1002 21:09:11.183571 2513 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="fcb0e641-2ff2-4819-a476-1102c29b81ac" containerName="mount-cgroup" Oct 2 21:09:11.183676 kubelet[2513]: I1002 21:09:11.183664 2513 memory_manager.go:346] "RemoveStaleState removing state" podUID="fcb0e641-2ff2-4819-a476-1102c29b81ac" containerName="mount-cgroup" Oct 2 21:09:11.183733 kubelet[2513]: I1002 21:09:11.183725 2513 memory_manager.go:346] "RemoveStaleState removing state" podUID="fcb0e641-2ff2-4819-a476-1102c29b81ac" containerName="mount-cgroup" Oct 2 21:09:11.188938 systemd[1]: Created slice kubepods-burstable-pod881d6942_7d56_4c07_8c32_3801527aaf44.slice. Oct 2 21:09:11.340083 kubelet[2513]: I1002 21:09:11.340038 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-host-proc-sys-net\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340083 kubelet[2513]: I1002 21:09:11.340089 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-bpf-maps\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340284 kubelet[2513]: I1002 21:09:11.340128 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-lib-modules\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340284 kubelet[2513]: I1002 21:09:11.340153 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-ipsec-secrets\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340284 kubelet[2513]: I1002 21:09:11.340175 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-hostproc\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340284 kubelet[2513]: I1002 21:09:11.340236 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/881d6942-7d56-4c07-8c32-3801527aaf44-clustermesh-secrets\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340284 kubelet[2513]: I1002 21:09:11.340260 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/881d6942-7d56-4c07-8c32-3801527aaf44-hubble-tls\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340284 kubelet[2513]: I1002 21:09:11.340279 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-xtables-lock\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340479 kubelet[2513]: I1002 21:09:11.340456 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-cni-path\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340525 kubelet[2513]: I1002 21:09:11.340502 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-config-path\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340719 kubelet[2513]: I1002 21:09:11.340658 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-run\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340778 kubelet[2513]: I1002 21:09:11.340727 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-cgroup\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340778 kubelet[2513]: I1002 21:09:11.340749 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-w9l5v\" (UniqueName: \"kubernetes.io/projected/881d6942-7d56-4c07-8c32-3801527aaf44-kube-api-access-w9l5v\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340864 kubelet[2513]: I1002 21:09:11.340799 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-etc-cni-netd\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.340864 kubelet[2513]: I1002 21:09:11.340835 2513 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-host-proc-sys-kernel\") pod \"cilium-pfl9f\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " pod="kube-system/cilium-pfl9f" Oct 2 21:09:11.494160 env[1352]: time="2023-10-02T21:09:11.493412560Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-pfl9f,Uid:881d6942-7d56-4c07-8c32-3801527aaf44,Namespace:kube-system,Attempt:0,}" Oct 2 21:09:11.528224 env[1352]: time="2023-10-02T21:09:11.528140067Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:09:11.528369 env[1352]: time="2023-10-02T21:09:11.528245305Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:09:11.528369 env[1352]: time="2023-10-02T21:09:11.528271225Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:09:11.528523 env[1352]: time="2023-10-02T21:09:11.528484941Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447 pid=3565 runtime=io.containerd.runc.v2 Oct 2 21:09:11.544132 systemd[1]: Started cri-containerd-5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447.scope. Oct 2 21:09:11.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.580000 audit: BPF prog-id=129 op=LOAD Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3565 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:11.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562333564376330616632306433616462383035663339626461623931 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3565 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:11.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562333564376330616632306433616462383035663339626461623931 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit: BPF prog-id=130 op=LOAD Oct 2 21:09:11.581000 audit[3575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3565 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:11.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562333564376330616632306433616462383035663339626461623931 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit: BPF prog-id=131 op=LOAD Oct 2 21:09:11.581000 audit[3575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3565 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:11.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562333564376330616632306433616462383035663339626461623931 Oct 2 21:09:11.581000 audit: BPF prog-id=131 op=UNLOAD Oct 2 21:09:11.581000 audit: BPF prog-id=130 op=UNLOAD Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:11.581000 audit: BPF prog-id=132 op=LOAD Oct 2 21:09:11.581000 audit[3575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3565 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:11.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562333564376330616632306433616462383035663339626461623931 Oct 2 21:09:11.597450 env[1352]: time="2023-10-02T21:09:11.597411162Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-pfl9f,Uid:881d6942-7d56-4c07-8c32-3801527aaf44,Namespace:kube-system,Attempt:0,} returns sandbox id \"5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447\"" Oct 2 21:09:11.600582 env[1352]: time="2023-10-02T21:09:11.600549470Z" level=info msg="CreateContainer within sandbox \"5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 21:09:11.647840 env[1352]: time="2023-10-02T21:09:11.647767450Z" level=info msg="CreateContainer within sandbox \"5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3\"" Oct 2 21:09:11.650031 env[1352]: time="2023-10-02T21:09:11.649955254Z" level=info msg="StartContainer for \"d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3\"" Oct 2 21:09:11.686726 systemd[1]: Started cri-containerd-d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3.scope. Oct 2 21:09:11.702739 systemd[1]: cri-containerd-d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3.scope: Deactivated successfully. Oct 2 21:09:11.808756 env[1352]: time="2023-10-02T21:09:11.808704551Z" level=info msg="shim disconnected" id=d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3 Oct 2 21:09:11.808756 env[1352]: time="2023-10-02T21:09:11.808754311Z" level=warning msg="cleaning up after shim disconnected" id=d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3 namespace=k8s.io Oct 2 21:09:11.809037 env[1352]: time="2023-10-02T21:09:11.808765270Z" level=info msg="cleaning up dead shim" Oct 2 21:09:11.824347 env[1352]: time="2023-10-02T21:09:11.824287174Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3623 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:09:11Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:09:11.824619 env[1352]: time="2023-10-02T21:09:11.824541210Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 21:09:11.824842 env[1352]: time="2023-10-02T21:09:11.824809605Z" level=error msg="Failed to pipe stdout of container \"d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3\"" error="reading from a closed fifo" Oct 2 21:09:11.824924 env[1352]: time="2023-10-02T21:09:11.824873084Z" level=error msg="Failed to pipe stderr of container \"d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3\"" error="reading from a closed fifo" Oct 2 21:09:11.828557 env[1352]: time="2023-10-02T21:09:11.828517304Z" level=error msg="StartContainer for \"d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:09:11.828782 kubelet[2513]: E1002 21:09:11.828760 2513 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3" Oct 2 21:09:11.828878 kubelet[2513]: E1002 21:09:11.828859 2513 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:09:11.828878 kubelet[2513]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:09:11.828878 kubelet[2513]: rm /hostbin/cilium-mount Oct 2 21:09:11.828878 kubelet[2513]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-w9l5v,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:09:11.829036 kubelet[2513]: E1002 21:09:11.828892 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-pfl9f" podUID=881d6942-7d56-4c07-8c32-3801527aaf44 Oct 2 21:09:12.722568 env[1352]: time="2023-10-02T21:09:12.722521599Z" level=info msg="CreateContainer within sandbox \"5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 21:09:12.740709 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3565733556.mount: Deactivated successfully. Oct 2 21:09:12.753764 env[1352]: time="2023-10-02T21:09:12.753677643Z" level=info msg="CreateContainer within sandbox \"5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059\"" Oct 2 21:09:12.754345 env[1352]: time="2023-10-02T21:09:12.754301833Z" level=info msg="StartContainer for \"01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059\"" Oct 2 21:09:12.787799 systemd[1]: Started cri-containerd-01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059.scope. Oct 2 21:09:12.813100 systemd[1]: cri-containerd-01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059.scope: Deactivated successfully. Oct 2 21:09:12.830327 env[1352]: time="2023-10-02T21:09:12.830270216Z" level=info msg="shim disconnected" id=01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059 Oct 2 21:09:12.830327 env[1352]: time="2023-10-02T21:09:12.830324695Z" level=warning msg="cleaning up after shim disconnected" id=01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059 namespace=k8s.io Oct 2 21:09:12.830327 env[1352]: time="2023-10-02T21:09:12.830334255Z" level=info msg="cleaning up dead shim" Oct 2 21:09:12.843674 kubelet[2513]: E1002 21:09:12.843583 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:12.854709 env[1352]: time="2023-10-02T21:09:12.854629653Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3661 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:09:12Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:09:12.854969 env[1352]: time="2023-10-02T21:09:12.854889489Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 21:09:12.855173 env[1352]: time="2023-10-02T21:09:12.855137885Z" level=error msg="Failed to pipe stdout of container \"01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059\"" error="reading from a closed fifo" Oct 2 21:09:12.855482 env[1352]: time="2023-10-02T21:09:12.855261203Z" level=error msg="Failed to pipe stderr of container \"01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059\"" error="reading from a closed fifo" Oct 2 21:09:12.861433 env[1352]: time="2023-10-02T21:09:12.861380102Z" level=error msg="StartContainer for \"01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:09:12.861860 kubelet[2513]: E1002 21:09:12.861818 2513 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059" Oct 2 21:09:12.862695 kubelet[2513]: E1002 21:09:12.862676 2513 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:09:12.862695 kubelet[2513]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:09:12.862695 kubelet[2513]: rm /hostbin/cilium-mount Oct 2 21:09:12.862695 kubelet[2513]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-w9l5v,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:09:12.863011 kubelet[2513]: E1002 21:09:12.862977 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-pfl9f" podUID=881d6942-7d56-4c07-8c32-3801527aaf44 Oct 2 21:09:13.462445 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059-rootfs.mount: Deactivated successfully. Oct 2 21:09:13.721628 kubelet[2513]: I1002 21:09:13.721529 2513 scope.go:115] "RemoveContainer" containerID="d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3" Oct 2 21:09:13.721926 kubelet[2513]: I1002 21:09:13.721903 2513 scope.go:115] "RemoveContainer" containerID="d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3" Oct 2 21:09:13.723079 env[1352]: time="2023-10-02T21:09:13.723040673Z" level=info msg="RemoveContainer for \"d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3\"" Oct 2 21:09:13.723476 env[1352]: time="2023-10-02T21:09:13.723267509Z" level=info msg="RemoveContainer for \"d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3\"" Oct 2 21:09:13.723551 env[1352]: time="2023-10-02T21:09:13.723520345Z" level=error msg="RemoveContainer for \"d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3\" failed" error="failed to set removing state for container \"d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3\": container is already in removing state" Oct 2 21:09:13.723705 kubelet[2513]: E1002 21:09:13.723684 2513 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3\": container is already in removing state" containerID="d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3" Oct 2 21:09:13.723764 kubelet[2513]: E1002 21:09:13.723719 2513 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3": container is already in removing state; Skipping pod "cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44)" Oct 2 21:09:13.723978 kubelet[2513]: E1002 21:09:13.723954 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44)\"" pod="kube-system/cilium-pfl9f" podUID=881d6942-7d56-4c07-8c32-3801527aaf44 Oct 2 21:09:13.730898 env[1352]: time="2023-10-02T21:09:13.730861823Z" level=info msg="RemoveContainer for \"d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3\" returns successfully" Oct 2 21:09:13.795000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:13.795000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:13.795000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400295b8a0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:09:13.795000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:13.795000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40028b5d00 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:09:13.795000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:13.799000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:13.799000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400295bac0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:09:13.799000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:13.802000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:13.802000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028b5e20 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:09:13.802000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:14.724516 kubelet[2513]: E1002 21:09:14.724491 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44)\"" pod="kube-system/cilium-pfl9f" podUID=881d6942-7d56-4c07-8c32-3801527aaf44 Oct 2 21:09:14.913781 kubelet[2513]: W1002 21:09:14.913741 2513 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod881d6942_7d56_4c07_8c32_3801527aaf44.slice/cri-containerd-d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3.scope WatchSource:0}: container "d7623b27940b1ffe4b73ec1ea04ff5e9bf49264cdd84bdee43ff5565f18bdef3" in namespace "k8s.io": not found Oct 2 21:09:17.845107 kubelet[2513]: E1002 21:09:17.845081 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:18.019370 kubelet[2513]: W1002 21:09:18.019336 2513 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod881d6942_7d56_4c07_8c32_3801527aaf44.slice/cri-containerd-01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059.scope WatchSource:0}: task 01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059 not found: not found Oct 2 21:09:22.847223 kubelet[2513]: E1002 21:09:22.847194 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:27.848757 kubelet[2513]: E1002 21:09:27.848732 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:28.849102 env[1352]: time="2023-10-02T21:09:28.849012048Z" level=info msg="CreateContainer within sandbox \"5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 21:09:28.880369 env[1352]: time="2023-10-02T21:09:28.880302322Z" level=info msg="CreateContainer within sandbox \"5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754\"" Oct 2 21:09:28.881021 env[1352]: time="2023-10-02T21:09:28.880863992Z" level=info msg="StartContainer for \"05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754\"" Oct 2 21:09:28.903767 systemd[1]: Started cri-containerd-05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754.scope. Oct 2 21:09:28.921932 systemd[1]: cri-containerd-05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754.scope: Deactivated successfully. Oct 2 21:09:28.925947 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754-rootfs.mount: Deactivated successfully. Oct 2 21:09:28.955421 env[1352]: time="2023-10-02T21:09:28.955371098Z" level=info msg="shim disconnected" id=05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754 Oct 2 21:09:28.955715 env[1352]: time="2023-10-02T21:09:28.955694972Z" level=warning msg="cleaning up after shim disconnected" id=05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754 namespace=k8s.io Oct 2 21:09:28.955779 env[1352]: time="2023-10-02T21:09:28.955767131Z" level=info msg="cleaning up dead shim" Oct 2 21:09:28.968670 env[1352]: time="2023-10-02T21:09:28.968622475Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3703 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:09:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:09:28.969132 env[1352]: time="2023-10-02T21:09:28.969074987Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 21:09:28.971019 env[1352]: time="2023-10-02T21:09:28.969255784Z" level=error msg="Failed to pipe stdout of container \"05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754\"" error="reading from a closed fifo" Oct 2 21:09:28.971019 env[1352]: time="2023-10-02T21:09:28.970505563Z" level=error msg="Failed to pipe stderr of container \"05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754\"" error="reading from a closed fifo" Oct 2 21:09:28.974024 env[1352]: time="2023-10-02T21:09:28.973852187Z" level=error msg="StartContainer for \"05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:09:28.974132 kubelet[2513]: E1002 21:09:28.974049 2513 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754" Oct 2 21:09:28.974394 kubelet[2513]: E1002 21:09:28.974152 2513 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:09:28.974394 kubelet[2513]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:09:28.974394 kubelet[2513]: rm /hostbin/cilium-mount Oct 2 21:09:28.974394 kubelet[2513]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-w9l5v,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:09:28.974516 kubelet[2513]: E1002 21:09:28.974203 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-pfl9f" podUID=881d6942-7d56-4c07-8c32-3801527aaf44 Oct 2 21:09:29.753991 kubelet[2513]: I1002 21:09:29.753946 2513 scope.go:115] "RemoveContainer" containerID="01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059" Oct 2 21:09:29.754352 kubelet[2513]: I1002 21:09:29.754319 2513 scope.go:115] "RemoveContainer" containerID="01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059" Oct 2 21:09:29.755670 env[1352]: time="2023-10-02T21:09:29.755634293Z" level=info msg="RemoveContainer for \"01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059\"" Oct 2 21:09:29.756540 env[1352]: time="2023-10-02T21:09:29.756475399Z" level=info msg="RemoveContainer for \"01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059\"" Oct 2 21:09:29.756711 env[1352]: time="2023-10-02T21:09:29.756648836Z" level=error msg="RemoveContainer for \"01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059\" failed" error="failed to set removing state for container \"01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059\": container is already in removing state" Oct 2 21:09:29.756900 kubelet[2513]: E1002 21:09:29.756864 2513 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059\": container is already in removing state" containerID="01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059" Oct 2 21:09:29.756967 kubelet[2513]: E1002 21:09:29.756908 2513 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059": container is already in removing state; Skipping pod "cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44)" Oct 2 21:09:29.757207 kubelet[2513]: E1002 21:09:29.757173 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44)\"" pod="kube-system/cilium-pfl9f" podUID=881d6942-7d56-4c07-8c32-3801527aaf44 Oct 2 21:09:29.764827 env[1352]: time="2023-10-02T21:09:29.764783779Z" level=info msg="RemoveContainer for \"01824bf996c6d473cacc5dbe2fcfc480e137f9d311ecb5e572a1d33e41c66059\" returns successfully" Oct 2 21:09:32.060679 kubelet[2513]: W1002 21:09:32.060578 2513 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod881d6942_7d56_4c07_8c32_3801527aaf44.slice/cri-containerd-05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754.scope WatchSource:0}: task 05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754 not found: not found Oct 2 21:09:32.850107 kubelet[2513]: E1002 21:09:32.850081 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:37.851727 kubelet[2513]: E1002 21:09:37.851678 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:42.847031 kubelet[2513]: E1002 21:09:42.846962 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44)\"" pod="kube-system/cilium-pfl9f" podUID=881d6942-7d56-4c07-8c32-3801527aaf44 Oct 2 21:09:42.852560 kubelet[2513]: E1002 21:09:42.852507 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:47.853974 kubelet[2513]: E1002 21:09:47.853924 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:52.855484 kubelet[2513]: E1002 21:09:52.855443 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:53.848885 env[1352]: time="2023-10-02T21:09:53.848839962Z" level=info msg="CreateContainer within sandbox \"5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 21:09:53.874496 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3164145476.mount: Deactivated successfully. Oct 2 21:09:53.892022 env[1352]: time="2023-10-02T21:09:53.891959684Z" level=info msg="CreateContainer within sandbox \"5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd\"" Oct 2 21:09:53.892668 env[1352]: time="2023-10-02T21:09:53.892577856Z" level=info msg="StartContainer for \"abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd\"" Oct 2 21:09:53.915017 systemd[1]: Started cri-containerd-abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd.scope. Oct 2 21:09:53.931529 systemd[1]: cri-containerd-abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd.scope: Deactivated successfully. Oct 2 21:09:53.957103 env[1352]: time="2023-10-02T21:09:53.957052636Z" level=info msg="shim disconnected" id=abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd Oct 2 21:09:53.957390 env[1352]: time="2023-10-02T21:09:53.957370723Z" level=warning msg="cleaning up after shim disconnected" id=abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd namespace=k8s.io Oct 2 21:09:53.957487 env[1352]: time="2023-10-02T21:09:53.957473005Z" level=info msg="cleaning up dead shim" Oct 2 21:09:53.971154 env[1352]: time="2023-10-02T21:09:53.971106111Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3744 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:09:53Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:09:53.971574 env[1352]: time="2023-10-02T21:09:53.971517279Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 21:09:53.972697 env[1352]: time="2023-10-02T21:09:53.972652541Z" level=error msg="Failed to pipe stdout of container \"abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd\"" error="reading from a closed fifo" Oct 2 21:09:53.972835 env[1352]: time="2023-10-02T21:09:53.972803344Z" level=error msg="Failed to pipe stderr of container \"abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd\"" error="reading from a closed fifo" Oct 2 21:09:53.977679 env[1352]: time="2023-10-02T21:09:53.977637959Z" level=error msg="StartContainer for \"abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:09:53.980605 kubelet[2513]: E1002 21:09:53.980562 2513 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd" Oct 2 21:09:53.980894 kubelet[2513]: E1002 21:09:53.980688 2513 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:09:53.980894 kubelet[2513]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:09:53.980894 kubelet[2513]: rm /hostbin/cilium-mount Oct 2 21:09:53.980894 kubelet[2513]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-w9l5v,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:09:53.981051 kubelet[2513]: E1002 21:09:53.980725 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-pfl9f" podUID=881d6942-7d56-4c07-8c32-3801527aaf44 Oct 2 21:09:54.795897 kubelet[2513]: I1002 21:09:54.795867 2513 scope.go:115] "RemoveContainer" containerID="05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754" Oct 2 21:09:54.796228 kubelet[2513]: I1002 21:09:54.796205 2513 scope.go:115] "RemoveContainer" containerID="05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754" Oct 2 21:09:54.799586 env[1352]: time="2023-10-02T21:09:54.799554094Z" level=info msg="RemoveContainer for \"05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754\"" Oct 2 21:09:54.802926 env[1352]: time="2023-10-02T21:09:54.802895879Z" level=info msg="RemoveContainer for \"05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754\"" Oct 2 21:09:54.803173 env[1352]: time="2023-10-02T21:09:54.803141763Z" level=error msg="RemoveContainer for \"05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754\" failed" error="failed to set removing state for container \"05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754\": container is already in removing state" Oct 2 21:09:54.803740 kubelet[2513]: E1002 21:09:54.803704 2513 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754\": container is already in removing state" containerID="05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754" Oct 2 21:09:54.803827 kubelet[2513]: E1002 21:09:54.803750 2513 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754": container is already in removing state; Skipping pod "cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44)" Oct 2 21:09:54.804065 kubelet[2513]: E1002 21:09:54.804045 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44)\"" pod="kube-system/cilium-pfl9f" podUID=881d6942-7d56-4c07-8c32-3801527aaf44 Oct 2 21:09:54.809305 env[1352]: time="2023-10-02T21:09:54.809267121Z" level=info msg="RemoveContainer for \"05c538f84aa35090e6eb7aa139e6dd775f9891ba607dc978da1d68f93c7b7754\" returns successfully" Oct 2 21:09:54.871864 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd-rootfs.mount: Deactivated successfully. Oct 2 21:09:57.062568 kubelet[2513]: W1002 21:09:57.062527 2513 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod881d6942_7d56_4c07_8c32_3801527aaf44.slice/cri-containerd-abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd.scope WatchSource:0}: task abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd not found: not found Oct 2 21:09:57.856586 kubelet[2513]: E1002 21:09:57.856559 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:58.677000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:58.684795 kernel: kauditd_printk_skb: 70 callbacks suppressed Oct 2 21:09:58.684909 kernel: audit: type=1400 audit(1696280998.677:1405): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:58.677000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:58.731756 kernel: audit: type=1400 audit(1696280998.677:1406): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:58.731882 kernel: audit: type=1300 audit(1696280998.677:1406): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000e36f90 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:09:58.677000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000e36f90 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:09:58.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:58.805351 kernel: audit: type=1327 audit(1696280998.677:1406): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:58.677000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001238aa0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:09:58.836932 kernel: audit: type=1300 audit(1696280998.677:1405): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001238aa0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:09:58.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:58.865547 kernel: audit: type=1327 audit(1696280998.677:1405): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:59.427000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:59.427000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:59.494403 kernel: audit: type=1400 audit(1696280999.427:1408): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:59.494587 kernel: audit: type=1400 audit(1696280999.427:1407): avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:59.427000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400f58c460 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:09:59.523743 kernel: audit: type=1300 audit(1696280999.427:1408): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400f58c460 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:09:59.427000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:09:59.552879 kernel: audit: type=1327 audit(1696280999.427:1408): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:09:59.427000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400bc4a870 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:09:59.427000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:09:59.461000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:59.461000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4000f938c0 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:09:59.461000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:09:59.677000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:59.677000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4000e2e780 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:09:59.677000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:09:59.680000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:59.680000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400edffa60 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:09:59.680000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:09:59.688000 audit[2318]: AVC avc: denied { watch } for pid=2318 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:59.688000 audit[2318]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400bc4ab10 a2=fc6 a3=0 items=0 ppid=2198 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c988 key=(null) Oct 2 21:09:59.688000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:10:02.676927 env[1352]: time="2023-10-02T21:10:02.676874482Z" level=info msg="StopPodSandbox for \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\"" Oct 2 21:10:02.677450 env[1352]: time="2023-10-02T21:10:02.677384771Z" level=info msg="TearDown network for sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" successfully" Oct 2 21:10:02.677564 env[1352]: time="2023-10-02T21:10:02.677548134Z" level=info msg="StopPodSandbox for \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" returns successfully" Oct 2 21:10:02.678183 env[1352]: time="2023-10-02T21:10:02.678146024Z" level=info msg="RemovePodSandbox for \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\"" Oct 2 21:10:02.678267 env[1352]: time="2023-10-02T21:10:02.678184265Z" level=info msg="Forcibly stopping sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\"" Oct 2 21:10:02.678267 env[1352]: time="2023-10-02T21:10:02.678250866Z" level=info msg="TearDown network for sandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" successfully" Oct 2 21:10:02.685204 env[1352]: time="2023-10-02T21:10:02.685146505Z" level=info msg="RemovePodSandbox \"87f800247a091715adff47f5961776e4de974f614b3daa15e7dc39ed7613ee56\" returns successfully" Oct 2 21:10:02.685863 env[1352]: time="2023-10-02T21:10:02.685836357Z" level=info msg="StopPodSandbox for \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\"" Oct 2 21:10:02.686109 env[1352]: time="2023-10-02T21:10:02.686046241Z" level=info msg="TearDown network for sandbox \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\" successfully" Oct 2 21:10:02.686205 env[1352]: time="2023-10-02T21:10:02.686187883Z" level=info msg="StopPodSandbox for \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\" returns successfully" Oct 2 21:10:02.686630 env[1352]: time="2023-10-02T21:10:02.686578370Z" level=info msg="RemovePodSandbox for \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\"" Oct 2 21:10:02.686846 env[1352]: time="2023-10-02T21:10:02.686806094Z" level=info msg="Forcibly stopping sandbox \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\"" Oct 2 21:10:02.687012 env[1352]: time="2023-10-02T21:10:02.686968216Z" level=info msg="TearDown network for sandbox \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\" successfully" Oct 2 21:10:02.694696 env[1352]: time="2023-10-02T21:10:02.694646749Z" level=info msg="RemovePodSandbox \"5910eae34cb9b527aaf11cf42ab0a73178f0ab8d59fcabddc1306f289eeba61d\" returns successfully" Oct 2 21:10:02.857870 kubelet[2513]: E1002 21:10:02.857846 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:07.859240 kubelet[2513]: E1002 21:10:07.859213 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:08.846697 kubelet[2513]: E1002 21:10:08.846648 2513 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-pfl9f_kube-system(881d6942-7d56-4c07-8c32-3801527aaf44)\"" pod="kube-system/cilium-pfl9f" podUID=881d6942-7d56-4c07-8c32-3801527aaf44 Oct 2 21:10:12.425757 env[1352]: time="2023-10-02T21:10:12.425518619Z" level=info msg="StopPodSandbox for \"5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447\"" Oct 2 21:10:12.425757 env[1352]: time="2023-10-02T21:10:12.425605821Z" level=info msg="Container to stop \"abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:10:12.427336 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447-shm.mount: Deactivated successfully. Oct 2 21:10:12.466639 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:10:12.466803 kernel: audit: type=1334 audit(1696281012.444:1413): prog-id=129 op=UNLOAD Oct 2 21:10:12.444000 audit: BPF prog-id=129 op=UNLOAD Oct 2 21:10:12.444489 systemd[1]: cri-containerd-5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447.scope: Deactivated successfully. Oct 2 21:10:12.468000 audit: BPF prog-id=132 op=UNLOAD Oct 2 21:10:12.480400 kernel: audit: type=1334 audit(1696281012.468:1414): prog-id=132 op=UNLOAD Oct 2 21:10:12.507195 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447-rootfs.mount: Deactivated successfully. Oct 2 21:10:12.555411 env[1352]: time="2023-10-02T21:10:12.555346121Z" level=info msg="shim disconnected" id=5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447 Oct 2 21:10:12.555411 env[1352]: time="2023-10-02T21:10:12.555401082Z" level=warning msg="cleaning up after shim disconnected" id=5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447 namespace=k8s.io Oct 2 21:10:12.555411 env[1352]: time="2023-10-02T21:10:12.555411882Z" level=info msg="cleaning up dead shim" Oct 2 21:10:12.573828 sshd[3545]: pam_unix(sshd:session): session closed for user core Oct 2 21:10:12.574000 audit[3545]: USER_END pid=3545 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:10:12.587016 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 21:10:12.587653 systemd[1]: sshd@29-10.200.20.18:22-10.200.12.6:52488.service: Deactivated successfully. Oct 2 21:10:12.589497 systemd-logind[1337]: Session 32 logged out. Waiting for processes to exit. Oct 2 21:10:12.590541 systemd-logind[1337]: Removed session 32. Oct 2 21:10:12.574000 audit[3545]: CRED_DISP pid=3545 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:10:12.626621 kernel: audit: type=1106 audit(1696281012.574:1415): pid=3545 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:10:12.626920 kernel: audit: type=1104 audit(1696281012.574:1416): pid=3545 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:10:12.626950 env[1352]: time="2023-10-02T21:10:12.626799069Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:10:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3776 runtime=io.containerd.runc.v2\n" Oct 2 21:10:12.627144 env[1352]: time="2023-10-02T21:10:12.627114274Z" level=info msg="TearDown network for sandbox \"5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447\" successfully" Oct 2 21:10:12.627202 env[1352]: time="2023-10-02T21:10:12.627142434Z" level=info msg="StopPodSandbox for \"5b35d7c0af20d3adb805f39bdab919aa1f3b37743c9f686ff55fcb219c295447\" returns successfully" Oct 2 21:10:12.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.18:22-10.200.12.6:52488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:10:12.657383 kernel: audit: type=1131 audit(1696281012.584:1417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.18:22-10.200.12.6:52488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:10:12.782271 kubelet[2513]: I1002 21:10:12.782239 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:12.782641 kubelet[2513]: I1002 21:10:12.782265 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-host-proc-sys-kernel\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782641 kubelet[2513]: I1002 21:10:12.782312 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-xtables-lock\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782641 kubelet[2513]: I1002 21:10:12.782352 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-config-path\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782641 kubelet[2513]: I1002 21:10:12.782370 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-lib-modules\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782641 kubelet[2513]: I1002 21:10:12.782386 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-cni-path\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782641 kubelet[2513]: I1002 21:10:12.782407 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/881d6942-7d56-4c07-8c32-3801527aaf44-hubble-tls\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782810 kubelet[2513]: I1002 21:10:12.782433 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-etc-cni-netd\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782810 kubelet[2513]: I1002 21:10:12.782450 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-hostproc\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782810 kubelet[2513]: I1002 21:10:12.782473 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/881d6942-7d56-4c07-8c32-3801527aaf44-clustermesh-secrets\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782810 kubelet[2513]: I1002 21:10:12.782499 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-host-proc-sys-net\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782810 kubelet[2513]: I1002 21:10:12.782522 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-ipsec-secrets\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782810 kubelet[2513]: I1002 21:10:12.782542 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-bpf-maps\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782963 kubelet[2513]: I1002 21:10:12.782559 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-run\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782963 kubelet[2513]: I1002 21:10:12.782590 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-w9l5v\" (UniqueName: \"kubernetes.io/projected/881d6942-7d56-4c07-8c32-3801527aaf44-kube-api-access-w9l5v\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782963 kubelet[2513]: I1002 21:10:12.782628 2513 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-cgroup\") pod \"881d6942-7d56-4c07-8c32-3801527aaf44\" (UID: \"881d6942-7d56-4c07-8c32-3801527aaf44\") " Oct 2 21:10:12.782963 kubelet[2513]: I1002 21:10:12.782664 2513 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.782963 kubelet[2513]: I1002 21:10:12.782697 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:12.782963 kubelet[2513]: I1002 21:10:12.782715 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:12.783106 kubelet[2513]: W1002 21:10:12.782906 2513 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/881d6942-7d56-4c07-8c32-3801527aaf44/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 21:10:12.785623 kubelet[2513]: I1002 21:10:12.783655 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:12.785623 kubelet[2513]: I1002 21:10:12.783694 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-cni-path" (OuterVolumeSpecName: "cni-path") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:12.785623 kubelet[2513]: I1002 21:10:12.784969 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:10:12.785623 kubelet[2513]: I1002 21:10:12.785034 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:12.785623 kubelet[2513]: I1002 21:10:12.785276 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:12.785858 kubelet[2513]: I1002 21:10:12.785309 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:12.785858 kubelet[2513]: I1002 21:10:12.785552 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:12.785858 kubelet[2513]: I1002 21:10:12.785576 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-hostproc" (OuterVolumeSpecName: "hostproc") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:12.789634 systemd[1]: var-lib-kubelet-pods-881d6942\x2d7d56\x2d4c07\x2d8c32\x2d3801527aaf44-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 21:10:12.791109 systemd[1]: var-lib-kubelet-pods-881d6942\x2d7d56\x2d4c07\x2d8c32\x2d3801527aaf44-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 21:10:12.794774 systemd[1]: var-lib-kubelet-pods-881d6942\x2d7d56\x2d4c07\x2d8c32\x2d3801527aaf44-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dw9l5v.mount: Deactivated successfully. Oct 2 21:10:12.796795 kubelet[2513]: I1002 21:10:12.796745 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:10:12.796873 kubelet[2513]: I1002 21:10:12.796752 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/881d6942-7d56-4c07-8c32-3801527aaf44-kube-api-access-w9l5v" (OuterVolumeSpecName: "kube-api-access-w9l5v") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "kube-api-access-w9l5v". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:10:12.796963 kubelet[2513]: I1002 21:10:12.796946 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/881d6942-7d56-4c07-8c32-3801527aaf44-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:10:12.797965 kubelet[2513]: I1002 21:10:12.797935 2513 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/881d6942-7d56-4c07-8c32-3801527aaf44-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "881d6942-7d56-4c07-8c32-3801527aaf44" (UID: "881d6942-7d56-4c07-8c32-3801527aaf44"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:10:12.829232 kubelet[2513]: I1002 21:10:12.829212 2513 scope.go:115] "RemoveContainer" containerID="abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd" Oct 2 21:10:12.834811 systemd[1]: Removed slice kubepods-burstable-pod881d6942_7d56_4c07_8c32_3801527aaf44.slice. Oct 2 21:10:12.835345 env[1352]: time="2023-10-02T21:10:12.835232306Z" level=info msg="RemoveContainer for \"abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd\"" Oct 2 21:10:12.844551 env[1352]: time="2023-10-02T21:10:12.842392653Z" level=info msg="RemoveContainer for \"abf20176b6d346557167b38be173319f217ca0ddb0e0d671d4cfada58298b0dd\" returns successfully" Oct 2 21:10:12.861020 kubelet[2513]: E1002 21:10:12.860973 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:12.883154 kubelet[2513]: I1002 21:10:12.883130 2513 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-bpf-maps\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.883348 kubelet[2513]: I1002 21:10:12.883338 2513 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-run\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.883431 kubelet[2513]: I1002 21:10:12.883423 2513 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-w9l5v\" (UniqueName: \"kubernetes.io/projected/881d6942-7d56-4c07-8c32-3801527aaf44-kube-api-access-w9l5v\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.883503 kubelet[2513]: I1002 21:10:12.883494 2513 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-cgroup\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.883586 kubelet[2513]: I1002 21:10:12.883577 2513 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-xtables-lock\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.883693 kubelet[2513]: I1002 21:10:12.883684 2513 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-config-path\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.883782 kubelet[2513]: I1002 21:10:12.883773 2513 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-lib-modules\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.883856 kubelet[2513]: I1002 21:10:12.883849 2513 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-cni-path\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.883931 kubelet[2513]: I1002 21:10:12.883922 2513 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/881d6942-7d56-4c07-8c32-3801527aaf44-hubble-tls\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.884002 kubelet[2513]: I1002 21:10:12.883984 2513 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-hostproc\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.884063 kubelet[2513]: I1002 21:10:12.884055 2513 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-etc-cni-netd\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.884163 kubelet[2513]: I1002 21:10:12.884155 2513 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/881d6942-7d56-4c07-8c32-3801527aaf44-host-proc-sys-net\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.884271 kubelet[2513]: I1002 21:10:12.884260 2513 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/881d6942-7d56-4c07-8c32-3801527aaf44-clustermesh-secrets\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:12.884345 kubelet[2513]: I1002 21:10:12.884337 2513 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/881d6942-7d56-4c07-8c32-3801527aaf44-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-9c05479676\" DevicePath \"\"" Oct 2 21:10:13.427360 systemd[1]: var-lib-kubelet-pods-881d6942\x2d7d56\x2d4c07\x2d8c32\x2d3801527aaf44-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 21:10:13.796000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:13.797000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:13.843460 kernel: audit: type=1400 audit(1696281013.796:1418): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:13.843632 kernel: audit: type=1400 audit(1696281013.797:1419): avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:13.843682 kernel: audit: type=1300 audit(1696281013.797:1419): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400187d8e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:10:13.797000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400187d8e0 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:10:13.797000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:13.918183 kernel: audit: type=1327 audit(1696281013.797:1419): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:13.796000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002213160 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:10:13.955753 kernel: audit: type=1300 audit(1696281013.796:1418): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002213160 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:10:13.796000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:13.800000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:13.800000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002213180 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:10:13.800000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:13.819000 audit[2399]: AVC avc: denied { watch } for pid=2399 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:13.819000 audit[2399]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400187da00 a2=fc6 a3=0 items=0 ppid=2252 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:10:13.819000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:14.848942 kubelet[2513]: I1002 21:10:14.848916 2513 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=881d6942-7d56-4c07-8c32-3801527aaf44 path="/var/lib/kubelet/pods/881d6942-7d56-4c07-8c32-3801527aaf44/volumes" Oct 2 21:10:17.861897 kubelet[2513]: E1002 21:10:17.861872 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:22.863420 kubelet[2513]: E1002 21:10:22.863320 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:27.864737 kubelet[2513]: E1002 21:10:27.864665 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:27.967873 systemd[1]: cri-containerd-b3d7a83bff2ac76f7824ad3e96091eb714d5cfddc315de36935a9382c1e09c3c.scope: Deactivated successfully. Oct 2 21:10:27.968189 systemd[1]: cri-containerd-b3d7a83bff2ac76f7824ad3e96091eb714d5cfddc315de36935a9382c1e09c3c.scope: Consumed 3.719s CPU time. Oct 2 21:10:27.972000 audit: BPF prog-id=88 op=UNLOAD Oct 2 21:10:27.983628 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 21:10:27.983791 kernel: audit: type=1334 audit(1696281027.972:1422): prog-id=88 op=UNLOAD Oct 2 21:10:27.972000 audit: BPF prog-id=99 op=UNLOAD Oct 2 21:10:27.992872 kernel: audit: type=1334 audit(1696281027.972:1423): prog-id=99 op=UNLOAD Oct 2 21:10:28.014751 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b3d7a83bff2ac76f7824ad3e96091eb714d5cfddc315de36935a9382c1e09c3c-rootfs.mount: Deactivated successfully. Oct 2 21:10:28.076164 env[1352]: time="2023-10-02T21:10:28.076113790Z" level=info msg="shim disconnected" id=b3d7a83bff2ac76f7824ad3e96091eb714d5cfddc315de36935a9382c1e09c3c Oct 2 21:10:28.076164 env[1352]: time="2023-10-02T21:10:28.076163150Z" level=warning msg="cleaning up after shim disconnected" id=b3d7a83bff2ac76f7824ad3e96091eb714d5cfddc315de36935a9382c1e09c3c namespace=k8s.io Oct 2 21:10:28.076164 env[1352]: time="2023-10-02T21:10:28.076172470Z" level=info msg="cleaning up dead shim" Oct 2 21:10:28.088512 env[1352]: time="2023-10-02T21:10:28.088462293Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:10:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3809 runtime=io.containerd.runc.v2\n" Oct 2 21:10:28.856105 kubelet[2513]: I1002 21:10:28.856075 2513 scope.go:115] "RemoveContainer" containerID="b3d7a83bff2ac76f7824ad3e96091eb714d5cfddc315de36935a9382c1e09c3c" Oct 2 21:10:28.857980 env[1352]: time="2023-10-02T21:10:28.857946126Z" level=info msg="CreateContainer within sandbox \"1cd20aa76d412d6d367ea14581ce9dd8d4228473f9c48c27a17d66a54433d9c0\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 21:10:28.888941 env[1352]: time="2023-10-02T21:10:28.888880444Z" level=info msg="CreateContainer within sandbox \"1cd20aa76d412d6d367ea14581ce9dd8d4228473f9c48c27a17d66a54433d9c0\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"da414ed5926f42f9b37cf6a472ed6e01ccd5d2042c6788985d398bf2e1070517\"" Oct 2 21:10:28.889400 env[1352]: time="2023-10-02T21:10:28.889377730Z" level=info msg="StartContainer for \"da414ed5926f42f9b37cf6a472ed6e01ccd5d2042c6788985d398bf2e1070517\"" Oct 2 21:10:28.919020 systemd[1]: Started cri-containerd-da414ed5926f42f9b37cf6a472ed6e01ccd5d2042c6788985d398bf2e1070517.scope. Oct 2 21:10:28.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.979836 kernel: audit: type=1400 audit(1696281028.941:1424): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.979951 kernel: audit: type=1400 audit(1696281028.941:1425): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.998670 kernel: audit: type=1400 audit(1696281028.941:1426): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:29.017422 kernel: audit: type=1400 audit(1696281028.941:1427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:29.035974 kernel: audit: type=1400 audit(1696281028.941:1428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:29.067040 kernel: audit: type=1400 audit(1696281028.941:1429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:29.088277 kernel: audit: type=1400 audit(1696281028.941:1430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:29.107154 kernel: audit: type=1400 audit(1696281028.941:1431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit: BPF prog-id=133 op=LOAD Oct 2 21:10:28.941000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[3828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2252 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:28.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461343134656435393236663432663962333763663661343732656436 Oct 2 21:10:28.941000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[3828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2252 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:28.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461343134656435393236663432663962333763663661343732656436 Oct 2 21:10:28.941000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.941000 audit: BPF prog-id=134 op=LOAD Oct 2 21:10:28.941000 audit[3828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2252 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:28.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461343134656435393236663432663962333763663661343732656436 Oct 2 21:10:28.960000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.960000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.960000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.960000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.960000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.960000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.960000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.960000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.960000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.960000 audit: BPF prog-id=135 op=LOAD Oct 2 21:10:28.960000 audit[3828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2252 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:28.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461343134656435393236663432663962333763663661343732656436 Oct 2 21:10:28.960000 audit: BPF prog-id=135 op=UNLOAD Oct 2 21:10:28.960000 audit: BPF prog-id=134 op=UNLOAD Oct 2 21:10:28.961000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.961000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.961000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.961000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.961000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.961000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.961000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.961000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.961000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.961000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:28.961000 audit: BPF prog-id=136 op=LOAD Oct 2 21:10:28.961000 audit[3828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2252 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:28.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461343134656435393236663432663962333763663661343732656436 Oct 2 21:10:29.114120 env[1352]: time="2023-10-02T21:10:29.114074351Z" level=info msg="StartContainer for \"da414ed5926f42f9b37cf6a472ed6e01ccd5d2042c6788985d398bf2e1070517\" returns successfully" Oct 2 21:10:30.314000 audit[3839]: AVC avc: denied { watch } for pid=3839 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:30.314000 audit[3839]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000051290 a2=fc6 a3=0 items=0 ppid=2252 pid=3839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:10:30.314000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:30.315000 audit[3839]: AVC avc: denied { watch } for pid=3839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:30.315000 audit[3839]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000d8e040 a2=fc6 a3=0 items=0 ppid=2252 pid=3839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c838 key=(null) Oct 2 21:10:30.315000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:30.465496 kubelet[2513]: E1002 21:10:30.465208 2513 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-9c05479676.178a6699b3591335", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-9c05479676", UID:"a702df7bee8664dc095179047dddc041", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-9c05479676"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 10, 19, 983401781, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 10, 19, 983401781, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.18:40516->10.200.20.11:2379: read: connection timed out' (will not retry!) Oct 2 21:10:31.847089 kubelet[2513]: E1002 21:10:31.846858 2513 controller.go:189] failed to update lease, error: Put "https://10.200.20.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-9c05479676?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) Oct 2 21:10:32.181027 systemd[1]: cri-containerd-6fe5c8649da25af3895439cfd781f2d635fd0f60e93768982da7486baf441174.scope: Deactivated successfully. Oct 2 21:10:32.181326 systemd[1]: cri-containerd-6fe5c8649da25af3895439cfd781f2d635fd0f60e93768982da7486baf441174.scope: Consumed 2.617s CPU time. Oct 2 21:10:32.184000 audit: BPF prog-id=84 op=UNLOAD Oct 2 21:10:32.184000 audit: BPF prog-id=92 op=UNLOAD Oct 2 21:10:32.205163 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6fe5c8649da25af3895439cfd781f2d635fd0f60e93768982da7486baf441174-rootfs.mount: Deactivated successfully. Oct 2 21:10:32.260439 env[1352]: time="2023-10-02T21:10:32.260340361Z" level=info msg="shim disconnected" id=6fe5c8649da25af3895439cfd781f2d635fd0f60e93768982da7486baf441174 Oct 2 21:10:32.260439 env[1352]: time="2023-10-02T21:10:32.260432802Z" level=warning msg="cleaning up after shim disconnected" id=6fe5c8649da25af3895439cfd781f2d635fd0f60e93768982da7486baf441174 namespace=k8s.io Oct 2 21:10:32.261180 env[1352]: time="2023-10-02T21:10:32.260442842Z" level=info msg="cleaning up dead shim" Oct 2 21:10:32.279626 env[1352]: time="2023-10-02T21:10:32.279560288Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:10:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3867 runtime=io.containerd.runc.v2\n" Oct 2 21:10:32.320869 kubelet[2513]: E1002 21:10:32.320818 2513 controller.go:189] failed to update lease, error: rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.18:40728->10.200.20.11:2379: read: connection timed out Oct 2 21:10:32.865362 kubelet[2513]: E1002 21:10:32.865294 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:32.866930 kubelet[2513]: I1002 21:10:32.866773 2513 scope.go:115] "RemoveContainer" containerID="6fe5c8649da25af3895439cfd781f2d635fd0f60e93768982da7486baf441174" Oct 2 21:10:32.868980 env[1352]: time="2023-10-02T21:10:32.868922617Z" level=info msg="CreateContainer within sandbox \"d3df52b94aa3bf514b8c950fd4ddfc3895e9a0ad2846015a2c952cb4a9147637\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 21:10:32.894825 env[1352]: time="2023-10-02T21:10:32.894781096Z" level=info msg="CreateContainer within sandbox \"d3df52b94aa3bf514b8c950fd4ddfc3895e9a0ad2846015a2c952cb4a9147637\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"4a13f3f54dac1f8fda6d98b5617523ab39041795f88cba3db1dec6d22da9d3f0\"" Oct 2 21:10:32.895394 env[1352]: time="2023-10-02T21:10:32.895371702Z" level=info msg="StartContainer for \"4a13f3f54dac1f8fda6d98b5617523ab39041795f88cba3db1dec6d22da9d3f0\"" Oct 2 21:10:32.920436 systemd[1]: Started cri-containerd-4a13f3f54dac1f8fda6d98b5617523ab39041795f88cba3db1dec6d22da9d3f0.scope. Oct 2 21:10:32.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.938000 audit: BPF prog-id=137 op=LOAD Oct 2 21:10:32.939000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.939000 audit[3887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2239 pid=3887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:32.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461313366336635346461633166386664613664393862353631373532 Oct 2 21:10:32.939000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.939000 audit[3887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2239 pid=3887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:32.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461313366336635346461633166386664613664393862353631373532 Oct 2 21:10:32.939000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.939000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.939000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.939000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.939000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.939000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.939000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.939000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.939000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.939000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.939000 audit: BPF prog-id=138 op=LOAD Oct 2 21:10:32.939000 audit[3887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2239 pid=3887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:32.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461313366336635346461633166386664613664393862353631373532 Oct 2 21:10:32.940000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.940000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.940000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.940000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.940000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.940000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.940000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.940000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.940000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.940000 audit: BPF prog-id=139 op=LOAD Oct 2 21:10:32.940000 audit[3887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2239 pid=3887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:32.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461313366336635346461633166386664613664393862353631373532 Oct 2 21:10:32.941000 audit: BPF prog-id=139 op=UNLOAD Oct 2 21:10:32.941000 audit: BPF prog-id=138 op=UNLOAD Oct 2 21:10:32.941000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.941000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.941000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.941000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.941000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.941000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.941000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.941000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.941000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.941000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:32.941000 audit: BPF prog-id=140 op=LOAD Oct 2 21:10:32.941000 audit[3887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2239 pid=3887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:32.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461313366336635346461633166386664613664393862353631373532 Oct 2 21:10:32.979113 env[1352]: time="2023-10-02T21:10:32.979023646Z" level=info msg="StartContainer for \"4a13f3f54dac1f8fda6d98b5617523ab39041795f88cba3db1dec6d22da9d3f0\" returns successfully" Oct 2 21:10:33.204098 systemd[1]: run-containerd-runc-k8s.io-4a13f3f54dac1f8fda6d98b5617523ab39041795f88cba3db1dec6d22da9d3f0-runc.cyy0yb.mount: Deactivated successfully. Oct 2 21:10:37.865964 kubelet[2513]: E1002 21:10:37.865938 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:42.321541 kubelet[2513]: E1002 21:10:42.321493 2513 controller.go:189] failed to update lease, error: Put "https://10.200.20.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-9c05479676?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) Oct 2 21:10:42.867457 kubelet[2513]: E1002 21:10:42.867435 2513 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"